Skip to content
fr Sign in
3.7 Low

CVE-2025-61755 Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler)

Description

Vulnerability in the Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle GraalVM for JDK: 17.0.16 and 21.0.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GraalVM for JDK accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).

Affected products and versions

Product Affected versions Fixed in
Oracle GraalVM for JDK 21.0.8 No fix stated
Oracle GraalVM for JDK 17.0.16 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Oracle GraalVM for JDK

The 64 CVEs of Oracle GraalVM for JDK →
CVE-2026-114820 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 9.1 Critical CVE-2026-91403 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 9.1 Critical CVE-2026-91463 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 5.3 Medium CVE-2026-91462 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 5.9 Medium
Track this CVE