Skip to content
fr Sign in
7.8 High

CVE-2026-62574 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE…

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected products and versions

Product Affected versions Fixed in
Oracle Java SE 26.0.2 No fix stated
Oracle Java SE 25.0.4 No fix stated
Oracle Java SE 21.0.12 No fix stated
Oracle Java SE 17.0.20 No fix stated
Oracle Java SE 11.0.32 No fix stated
Oracle Java SE 8u501 No fix stated
Oracle GraalVM for JDK 21.0.12 No fix stated
Oracle GraalVM for JDK 17.0.20 No fix stated
Oracle GraalVM Enterprise Edition 21.3.19 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Oracle Java SE

The 106 CVEs of Oracle Java SE →
CVE-2026-114820 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 9.1 Critical CVE-2026-91403 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE… 9.1 Critical CVE-2026-91487 Vulnerability in Oracle Java SE (component: Compiler) 4.8 Medium CVE-2026-91484 Vulnerability in Oracle Java SE (component: Java plugin) 7.5 High
Track this CVE