| CVE-2026-110938 |
In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2026-111075 |
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component fails to perform cross-field validation on…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2026-111074 |
In Eclipse OpenJ9 versions prior to 0.63.0, the JITServer component is vulnerable to a pre-authentication remote…
|
8.7
High
|
Oct 21, 2026 |
| CVE-2026-97400 |
In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent…
|
6.8
Medium
|
Oct 20, 2026 |
| CVE-2026-16440 |
In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault
|
5.7
Medium
|
Aug 19, 2026 |
| CVE-2026-6918 |
In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte…
|
8.7
High
|
May 5, 2026 |
| CVE-2023-2597 |
In Eclipse Openj9 before version 0.38.0, in the implementation of the shared cache (which is enabled by default in…
|
7.0
High
|
May 22, 2023 |