Known vulnerabilities in java-25-openjdk (Red Hat package)
Vendor:
Red Hat Inc.
Software:
java-25-openjdk (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:java-25-openjdk_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
15
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU135705 - Out-of-bounds write CVE-2026-26740 |
CWE-787 | Low | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 29.06.2026 |
SB2026062915 SB2026062924 SB2026062925 and 18 more |
||
| #VU126758 - Improper input validation CVE-2026-22016 |
CWE-20 | Medium | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 79 more |
||
| #VU126759 - Improper input validation CVE-2026-34282 |
CWE-20 | Medium | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 37 more |
||
| #VU126761 - Improper input validation CVE-2026-22021 |
CWE-20 | Medium | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 81 more |
||
| #VU126762 - Improper input validation CVE-2026-22013 |
CWE-20 | Medium | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 78 more |
||
| #VU126763 - Improper input validation CVE-2026-22008 |
CWE-20 | Low | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 22.04.2026 |
SB20260422123 SB2026050683 SB20260513117 and 20 more |
||
| #VU126764 - Improper input validation CVE-2026-22018 |
CWE-20 | Low | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 78 more |
||
| #VU126765 - Improper input validation CVE-2026-22007 |
CWE-20 | Low | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 78 more |
||
| #VU126766 - Improper input validation CVE-2026-34268 |
CWE-20 | Low | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 22.04.2026 |
SB20260422123 SB20260422124 SB20260422125 and 78 more |
||
| #VU125601 - Use After Free CVE-2026-33416 |
CWE-416 | High | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 09.04.2026 |
SB2026040959 SB2026040962 SB2026040963 and 60 more |
||
| #VU125600 - Out-of-bounds read CVE-2026-33636 |
CWE-125 | Medium | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 09.04.2026 |
SB2026040959 SB2026040962 SB2026040963 and 46 more |
||
| #VU123884 - Integer overflow CVE-2026-23865 |
CWE-190 | Medium | 25.0.3.0.9-1.el9, 25.0.3.0.9-1.el10_2 | 11.03.2026 |
SB2026031140 SB2026031141 SB2026031523 and 51 more |
||
| #VU117483 - Improper input validation CVE-2025-53066 |
CWE-20 | Medium | 25.0.1.0.8-2.el10 | 22.10.2025 |
SB20251022107 SB20251022108 SB20251022109 and 118 more |
||
| #VU117484 - Improper input validation CVE-2025-53057 |
CWE-20 | Medium | 25.0.1.0.8-2.el10 | 22.10.2025 |
SB20251022107 SB20251022108 SB20251022109 and 121 more |
||
| #VU117486 - Improper input validation CVE-2025-61748 |
CWE-20 | Low | 25.0.1.0.8-2.el10 | 22.10.2025 |
SB20251022107 SB20251022108 SB20251022109 and 19 more |