CVE-2026-21945

EUVD-2026-3564

20.01.2026, 22:15

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u471, 8u471-b50, 8u471-perf, 11.0.29, 17.0.17, 21.0.9, 25.0.1; Oracle GraalVM for JDK: 17.0.17 and  21.0.9; Oracle GraalVM Enterprise Edition: 21.3.16. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
oracle	CNA	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 54%

Affected Products (NVD)

Vendor	Product	Version
oracle	graalvm	21.3.16
oracle	graalvm_for_jdk	17.0.17
oracle	graalvm_for_jdk	21.0.9
oracle	jdk	1.8.0
oracle	jdk	1.8.0
oracle	jdk	1.8.0
oracle	jdk	11.0.29
oracle	jdk	17.0.17
oracle	jdk	21.0.9
oracle	jdk	25.0.1
oracle	jre	1.8.0
oracle	jre	1.8.0
oracle	jre	1.8.0
oracle	jre	11.0.29
oracle	jre	17.0.17
oracle	jre	21.0.9
oracle	jre	25.0.1

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Siemens	SIMATIC CN 4100	𝑥 < V5.0	ADP
Red Hat	OPENJDK ELS 11.0.30	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	OPENJDK ELS 11.0.30	openjdk-windows ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 17.0.18	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 17.0.18	openjdk-windows ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 21.0.10	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 21.0.10	openjdk-windows ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 25.0.2	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 8u482	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 8u482	openjdk-windows ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10	1:21.0.10.0.7-1.el10 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10	1:25.0.2.0.10-1.el10 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	1:21.0.10.0.7-1.el10 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	1:1.8.0.482.b08-1.el7_9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	1:17.0.18.0.8-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	1:21.0.10.0.7-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	1:1.8.0.482.b08-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	1:1.8.0.8.60-1.el8_10 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	1:1.8.0.482.b08-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	1:17.0.18.0.8-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	1:1.8.0.482.b08-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	1:17.0.18.0.8-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	1:1.8.0.482.b08-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	1:17.0.18.0.8-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	1:1.8.0.482.b08-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	1:17.0.18.0.8-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	1:1.8.0.482.b08-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	1:17.0.18.0.8-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	1:1.8.0.482.b08-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	1:17.0.18.0.8-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	1:1.8.0.482.b08-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	1:17.0.18.0.8-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	1:1.8.0.482.b08-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	1:17.0.18.0.8-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	1:21.0.10.0.7-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	1:1.8.0.482.b08-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	1:25.0.2.0.10-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	1:17.0.18.0.8-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	1:1.8.0.482.b08-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	1:17.0.18.0.8-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	1:1.8.0.482.b08-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	1:17.0.18.0.8-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	1:21.0.10.0.7-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	1:1.8.0.482.b08-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	1:17.0.18.0.8-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	1:21.0.10.0.7-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	1:1.8.0.482.b08-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenJDK 11 els for RHEL 7	1:11.0.30.0.7-1.el7_9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenJDK 11 els for RHEL 8	1:11.0.30.0.7-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenJDK 11 els for RHEL 9	1:11.0.30.0.7-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Temurin Build of OpenJDK 25.0.2	openjdk-windows ≤ 𝑥 < *	ADP
oracle	java_se	11.0.29	CNA
oracle	java_se	17.0.17	CNA
oracle	java_se	21.0.9	CNA
oracle	java_se	25.0.1	CNA
oracle	java_se	21.3.16	CNA

Debian Releases

Debian Product

Codename

openjdk-11

bullseye	vulnerable
bullseye (security)	11.0.31+11-1~deb11u1 fixed
sid	11.0.32~8ea-1 fixed

openjdk-17

bookworm	17.0.19+10-1~deb12u2 fixed
bookworm (security)	17.0.19+10-1~deb12u2 fixed
bullseye	vulnerable
bullseye (security)	17.0.19+10-1~deb11u1 fixed
sid	17.0.20~7ea-1 fixed

openjdk-21

sid	21.0.12~7ea-1 fixed
trixie	21.0.11+10-1~deb13u2 fixed
trixie (security)	21.0.11+10-1~deb13u2 fixed

openjdk-25

forky	25.0.4~4ea-1 fixed
sid	25.0.4~6ea-1 fixed
trixie	25.0.3+9-2~deb13u1 fixed
trixie (security)	25.0.3+9-2~deb13u1 fixed

openjdk-8

sid	8u492-ga-1 fixed

openSUSE / SLES Releases

openSUSE Product

Release

java-11-openjdk

suse enterprise sap 15 SP4	11.0.30.0-150000.3.135.1 fixed
suse enterprise sap 15 SP5	11.0.30.0-150000.3.135.1 fixed
suse enterprise sap 15 SP7	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 12 SP5	11.0.30.0-3.96.1 fixed
suse enterprise server 15 SP4	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP5	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP6	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP7	11.0.30.0-150000.3.135.1 fixed

java-11-openjdk-demo

suse enterprise sap 15 SP4	11.0.30.0-150000.3.135.1 fixed
suse enterprise sap 15 SP5	11.0.30.0-150000.3.135.1 fixed
suse enterprise sap 15 SP7	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 12 SP5	11.0.30.0-3.96.1 fixed
suse enterprise server 15 SP4	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP5	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP6	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP7	11.0.30.0-150000.3.135.1 fixed

java-11-openjdk-devel

suse enterprise sap 15 SP4	11.0.30.0-150000.3.135.1 fixed
suse enterprise sap 15 SP5	11.0.30.0-150000.3.135.1 fixed
suse enterprise sap 15 SP7	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 12 SP5	11.0.30.0-3.96.1 fixed
suse enterprise server 15 SP4	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP5	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP6	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP7	11.0.30.0-150000.3.135.1 fixed

java-11-openjdk-headless

suse enterprise sap 15 SP4	11.0.30.0-150000.3.135.1 fixed
suse enterprise sap 15 SP5	11.0.30.0-150000.3.135.1 fixed
suse enterprise sap 15 SP7	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 12 SP5	11.0.30.0-3.96.1 fixed
suse enterprise server 15 SP4	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP5	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP6	11.0.30.0-150000.3.135.1 fixed
suse enterprise server 15 SP7	11.0.30.0-150000.3.135.1 fixed

java-17-openjdk

suse enterprise sap 15 SP4	17.0.18.0-150400.3.63.1 fixed
suse enterprise sap 15 SP5	17.0.18.0-150400.3.63.1 fixed
suse enterprise sap 15 SP7	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP4	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP5	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP6	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP7	17.0.18.0-150400.3.63.1 fixed

java-17-openjdk-demo

suse enterprise sap 15 SP4	17.0.18.0-150400.3.63.1 fixed
suse enterprise sap 15 SP5	17.0.18.0-150400.3.63.1 fixed
suse enterprise sap 15 SP7	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP4	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP5	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP6	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP7	17.0.18.0-150400.3.63.1 fixed

java-17-openjdk-devel

suse enterprise sap 15 SP4	17.0.18.0-150400.3.63.1 fixed
suse enterprise sap 15 SP5	17.0.18.0-150400.3.63.1 fixed
suse enterprise sap 15 SP7	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP4	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP5	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP6	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP7	17.0.18.0-150400.3.63.1 fixed

java-17-openjdk-headless

suse enterprise sap 15 SP4	17.0.18.0-150400.3.63.1 fixed
suse enterprise sap 15 SP5	17.0.18.0-150400.3.63.1 fixed
suse enterprise sap 15 SP7	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP4	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP5	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP6	17.0.18.0-150400.3.63.1 fixed
suse enterprise server 15 SP7	17.0.18.0-150400.3.63.1 fixed

java-1_8_0-openjdk

suse enterprise sap 15 SP4	1.8.0.482-150000.3.117.1 fixed
suse enterprise sap 15 SP5	1.8.0.482-150000.3.117.1 fixed
suse enterprise sap 15 SP7	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 12 SP3	1.8.0.482-27.125.1 fixed
suse enterprise server 12 SP5	1.8.0.482-27.125.1 fixed
suse enterprise server 15 SP4	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP5	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP6	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP7	1.8.0.482-150000.3.117.1 fixed

java-1_8_0-openjdk-demo

suse enterprise sap 15 SP4	1.8.0.482-150000.3.117.1 fixed
suse enterprise sap 15 SP5	1.8.0.482-150000.3.117.1 fixed
suse enterprise sap 15 SP7	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 12 SP3	1.8.0.482-27.125.1 fixed
suse enterprise server 12 SP5	1.8.0.482-27.125.1 fixed
suse enterprise server 15 SP4	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP5	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP6	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP7	1.8.0.482-150000.3.117.1 fixed

java-1_8_0-openjdk-devel

suse enterprise sap 15 SP4	1.8.0.482-150000.3.117.1 fixed
suse enterprise sap 15 SP5	1.8.0.482-150000.3.117.1 fixed
suse enterprise sap 15 SP7	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 12 SP3	1.8.0.482-27.125.1 fixed
suse enterprise server 12 SP5	1.8.0.482-27.125.1 fixed
suse enterprise server 15 SP4	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP5	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP6	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP7	1.8.0.482-150000.3.117.1 fixed

java-1_8_0-openjdk-headless

suse enterprise sap 15 SP4	1.8.0.482-150000.3.117.1 fixed
suse enterprise sap 15 SP5	1.8.0.482-150000.3.117.1 fixed
suse enterprise sap 15 SP7	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 12 SP3	1.8.0.482-27.125.1 fixed
suse enterprise server 12 SP5	1.8.0.482-27.125.1 fixed
suse enterprise server 15 SP4	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP5	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP6	1.8.0.482-150000.3.117.1 fixed
suse enterprise server 15 SP7	1.8.0.482-150000.3.117.1 fixed

java-21-openjdk

suse enterprise desktop 15 SP7	21.0.10.0-150600.3.23.1 fixed
suse enterprise sap 15 SP7	21.0.10.0-150600.3.23.1 fixed
suse enterprise server 15 SP6	21.0.10.0-150600.3.23.1 fixed
suse enterprise server 15 SP7	21.0.10.0-150600.3.23.1 fixed

java-21-openjdk-demo

suse enterprise desktop 15 SP7	21.0.10.0-150600.3.23.1 fixed
suse enterprise sap 15 SP7	21.0.10.0-150600.3.23.1 fixed
suse enterprise server 15 SP6	21.0.10.0-150600.3.23.1 fixed
suse enterprise server 15 SP7	21.0.10.0-150600.3.23.1 fixed

java-21-openjdk-devel

suse enterprise desktop 15 SP7	21.0.10.0-150600.3.23.1 fixed
suse enterprise sap 15 SP7	21.0.10.0-150600.3.23.1 fixed
suse enterprise server 15 SP6	21.0.10.0-150600.3.23.1 fixed
suse enterprise server 15 SP7	21.0.10.0-150600.3.23.1 fixed

java-21-openjdk-headless

suse enterprise desktop 15 SP7	21.0.10.0-150600.3.23.1 fixed
suse enterprise sap 15 SP7	21.0.10.0-150600.3.23.1 fixed
suse enterprise server 15 SP6	21.0.10.0-150600.3.23.1 fixed
suse enterprise server 15 SP7	21.0.10.0-150600.3.23.1 fixed

java-25-openjdk

suse enterprise desktop 15 SP7	25.0.2.0-150700.15.7.1 fixed
suse enterprise sap 15 SP7	25.0.2.0-150700.15.7.1 fixed
suse enterprise server 15 SP7	25.0.2.0-150700.15.7.1 fixed

java-25-openjdk-demo

suse enterprise desktop 15 SP7	25.0.2.0-150700.15.7.1 fixed
suse enterprise sap 15 SP7	25.0.2.0-150700.15.7.1 fixed
suse enterprise server 15 SP7	25.0.2.0-150700.15.7.1 fixed

java-25-openjdk-devel

suse enterprise desktop 15 SP7	25.0.2.0-150700.15.7.1 fixed
suse enterprise sap 15 SP7	25.0.2.0-150700.15.7.1 fixed
suse enterprise server 15 SP7	25.0.2.0-150700.15.7.1 fixed

java-25-openjdk-headless

suse enterprise desktop 15 SP7	25.0.2.0-150700.15.7.1 fixed
suse enterprise sap 15 SP7	25.0.2.0-150700.15.7.1 fixed
suse enterprise server 15 SP7	25.0.2.0-150700.15.7.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

java-1.8.0-ibm

RHEL 8

1:1.8.0.8.60-1.el8_10

fixed

java-1.8.0-ibm-demo

RHEL 8

1:1.8.0.8.60-1.el8_10

fixed

java-1.8.0-ibm-devel

RHEL 8

1:1.8.0.8.60-1.el8_10

fixed

java-1.8.0-ibm-headless

RHEL 8

1:1.8.0.8.60-1.el8_10

fixed

java-1.8.0-ibm-jdbc

RHEL 8

1:1.8.0.8.60-1.el8_10

fixed

java-1.8.0-ibm-plugin

RHEL 8

1:1.8.0.8.60-1.el8_10

fixed

java-1.8.0-ibm-src

RHEL 8

1:1.8.0.8.60-1.el8_10

fixed

java-1.8.0-ibm-webstart

RHEL 8

1:1.8.0.8.60-1.el8_10

fixed

java-1.8.0-openjdk

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-accessibility

RHEL 8

1:1.8.0.482.b08-1.el8

fixed

java-1.8.0-openjdk-accessibility-fastdebug

RHEL 8

1:1.8.0.482.b08-1.el8

fixed

java-1.8.0-openjdk-accessibility-slowdebug

RHEL 8

1:1.8.0.482.b08-1.el8

fixed

java-1.8.0-openjdk-demo

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-demo-fastdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-demo-slowdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-devel

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-devel-fastdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-devel-slowdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-fastdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-headless

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-headless-fastdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-headless-slowdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-javadoc

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-javadoc-zip

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-slowdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-src

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-src-fastdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-1.8.0-openjdk-src-slowdebug

RHEL 8	1:1.8.0.482.b08-1.el8 fixed
RHEL 9	1:1.8.0.482.b08-1.el9 fixed

java-17-openjdk

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-demo

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-demo-fastdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-demo-slowdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-devel

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-devel-fastdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-devel-slowdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-fastdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-headless

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-headless-fastdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-headless-slowdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-javadoc

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-javadoc-zip

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-jmods

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-jmods-fastdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-jmods-slowdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-slowdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-src

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-src-fastdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-src-slowdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-static-libs

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-static-libs-fastdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-17-openjdk-static-libs-slowdebug

RHEL 8	1:17.0.18.0.8-1.el8 fixed
RHEL 9	1:17.0.18.0.8-1.el9 fixed

java-21-openjdk

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-demo

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-demo-fastdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-demo-slowdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-devel

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-devel-fastdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-devel-slowdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-fastdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-headless

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-headless-fastdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-headless-slowdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-javadoc

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-javadoc-zip

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-jmods

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-jmods-fastdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-jmods-slowdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-slowdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-src

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-src-fastdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-src-slowdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-static-libs

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-static-libs-fastdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-21-openjdk-static-libs-slowdebug

RHEL 8	1:21.0.10.0.7-1.el8 fixed
RHEL 9	1:21.0.10.0.7-1.el9 fixed

java-25-openjdk

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-crypto-adapter

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-crypto-adapter-fastdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-crypto-adapter-slowdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-demo

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-demo-fastdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-demo-slowdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-devel

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-devel-fastdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-devel-slowdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-fastdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-headless

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-headless-fastdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-headless-slowdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-javadoc

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-javadoc-zip

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-jmods

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-jmods-fastdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-jmods-slowdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-slowdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-src

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-src-fastdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-src-slowdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-static-libs

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-static-libs-fastdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

java-25-openjdk-static-libs-slowdebug

RHEL 9

1:25.0.2.0.10-1.el9

fixed

Amazon Linux Releases

Amazon Package

Release

java-1.8.0-amazon-corretto

Amazon Linux 2023

1:1.8.0_482.b08-1.amzn2023

fixed

java-1.8.0-amazon-corretto-devel

Amazon Linux 2023

1:1.8.0_482.b08-1.amzn2023

fixed

java-1.8.0-openjdk

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-accessibility

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-accessibility-debug

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-debug

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-debuginfo

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-demo

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-demo-debug

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-devel

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-devel-debug

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-headless

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-headless-debug

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-javadoc

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-javadoc-debug

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-javadoc-zip

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-javadoc-zip-debug

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-src

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

java-1.8.0-openjdk-src-debug

Amazon Linux 2

1:1.8.0.482.b08-1.amzn2.0.1

fixed

Common Weakness Enumeration

References

https://www.oracle.com/security-alerts/cpujan2026.html

https://access.redhat.com/errata/RHSA-2026:0847

https://access.redhat.com/errata/RHSA-2026:0848

https://access.redhat.com/errata/RHSA-2026:0895

https://access.redhat.com/errata/RHSA-2026:0897

https://access.redhat.com/errata/RHSA-2026:0899

https://access.redhat.com/errata/RHSA-2026:0901

https://access.redhat.com/errata/RHSA-2026:0927

https://access.redhat.com/errata/RHSA-2026:0928

https://access.redhat.com/errata/RHSA-2026:0931

https://access.redhat.com/errata/RHSA-2026:0932

https://access.redhat.com/errata/RHSA-2026:0933

https://access.redhat.com/errata/RHSA-2026:1606

https://access.redhat.com/errata/RHSA-2026:4832

https://access.redhat.com/security/cve/CVE-2026-21945

https://bugzilla.redhat.com/show_bug.cgi?id=2429927

https://cert-portal.siemens.com/productcert/html/ssa-032379.html

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21945.json