CVE-2026-22016

EUVD-2026-24327

21.04.2026, 21:16

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP).  Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and  21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
oracle	CNA	7.5 HIGH	NETWORK	LOW	NONE	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: 49%

Affected Products (NVD)

Vendor	Product	Version
oracle	jre	1.8.0
oracle	jre	1.8.0
oracle	jre	1.8.0
oracle	jre	11.0.30
oracle	jre	17.0.18
oracle	jre	21.0.10
oracle	jre	25.0.2
oracle	jdk	1.8.0
oracle	jdk	1.8.0
oracle	jdk	1.8.0
oracle	jdk	11.0.30
oracle	jdk	17.0.18
oracle	jdk	21.0.10
oracle	jdk	25.0.2
oracle	graalvm	21.3.17
oracle	graalvm_for_jdk	17.0.18
oracle	graalvm_for_jdk	21.0.10

𝑥

= Vulnerable software versions

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources.

Vendor	Product	Version	Source
Red Hat	OPENJDK ELS 11.0.31	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	OPENJDK ELS 11.0.31	openjdk-windows ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 17.0.19	openjdk-windows ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 17.0.9	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 21.0.11	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 21.0.11	openjdk-windows ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 25.0.3	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 8u492	openjdk-portable ≤ 𝑥 < *	ADP
Red Hat	Red Hat Build of OpenJDK 8u492	openjdk-windows ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10	1:21.0.11.0.10-2.el10_2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10	1:25.0.3.0.9-1.el10_2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10	1:21.0.11.0.10-2.el10_1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	1:21.0.11.0.10-1.el10_0 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	1:21.0.11.0.10-1.el10_2 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 10.2 Extended Update Support	1:21.0.11.0.10-2.el10_1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	1:1.8.0.492.b09-1.el7_9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	1:1.8.0.492.b09-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	1:17.0.19.0.10-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	1:21.0.11.0.10-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8	1:1.8.0.8.65-1.el8_10 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	1:1.8.0.492.b09-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	1:1.8.0.492.b09-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	1:17.0.19.0.10-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	1:1.8.0.492.b09-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	1:17.0.19.0.10-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	1:1.8.0.492.b09-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	1:17.0.19.0.10-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	1:1.8.0.492.b09-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	1:17.0.19.0.10-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	1:1.8.0.492.b09-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	1:17.0.19.0.10-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	1:1.8.0.492.b09-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	1:17.0.19.0.10-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	1:1.8.0.492.b09-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	1:17.0.19.0.10-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	1:1.8.0.492.b09-2.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	1:17.0.19.0.10-2.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	1:21.0.11.0.10-2.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9	1:25.0.3.0.9-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	1:1.8.0.492.b09-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	1:17.0.19.0.10-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	1:1.8.0.492.b09-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	1:17.0.19.0.10-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	1:1.8.0.492.b09-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	1:17.0.19.0.10-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	1:21.0.11.0.10-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	1:1.8.0.492.b09-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	1:17.0.19.0.10-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	1:21.0.11.0.10-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenJDK 11 els for RHEL 7	1:11.0.31.0.11-1.el7_9 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenJDK 11 els for RHEL 8	1:11.0.31.0.11-1.el8 ≤ 𝑥 < *	ADP
Red Hat	Red Hat OpenJDK 11 els for RHEL 9	1:11.0.31.0.11-1.el9 ≤ 𝑥 < *	ADP
Red Hat	Temurin Build of OpenJDK 25.0.3	openjdk-windows ≤ 𝑥 < *	ADP
Red Hat	Red Hat Hardened Images	21.0.11.0.10-2.hum1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Hardened Images	21.0.11.0.10-1.hum1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Hardened Images	25.0.3.0.9-1.hum1 ≤ 𝑥 < *	ADP
Red Hat	Red Hat Hardened Images	25.0.3.0.9-1.hum1 ≤ 𝑥 < *	ADP
oracle	java_se	11.0.30	CNA
oracle	java_se	17.0.18	CNA
oracle	java_se	21.0.10	CNA
oracle	java_se	25.0.2	CNA
oracle	java_se	26	CNA
oracle	java_se	21.3.17	CNA

Debian Releases

Debian Product

Codename

openjdk-11

bullseye	vulnerable
bullseye (security)	11.0.31+11-1~deb11u1 fixed
sid	11.0.32~8ea-1 fixed

openjdk-17

bookworm	17.0.19+10-1~deb12u2 fixed
bookworm (security)	17.0.19+10-1~deb12u2 fixed
bullseye	vulnerable
bullseye (security)	17.0.19+10-1~deb11u1 fixed
sid	17.0.20~7ea-1 fixed

openjdk-21

sid	21.0.12~7ea-1 fixed
trixie	21.0.11+10-1~deb13u2 fixed
trixie (security)	21.0.11+10-1~deb13u2 fixed

openjdk-25

forky	25.0.4~4ea-1 fixed
sid	25.0.4~6ea-1 fixed
trixie	25.0.3+9-2~deb13u1 fixed
trixie (security)	25.0.3+9-2~deb13u1 fixed

openjdk-8

sid	8u492-ga-1 fixed

openSUSE / SLES Releases

openSUSE Product

Release

java-11-openjdk

suse enterprise sap 15 SP4	11.0.31.0-150000.3.138.1 fixed
suse enterprise sap 15 SP5	11.0.31.0-150000.3.138.1 fixed
suse enterprise sap 15 SP7	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 12 SP5	11.0.31.0-3.99.1 fixed
suse enterprise server 15 SP4	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP5	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP6	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP7	11.0.31.0-150000.3.138.1 fixed

java-11-openjdk-demo

suse enterprise sap 15 SP4	11.0.31.0-150000.3.138.1 fixed
suse enterprise sap 15 SP5	11.0.31.0-150000.3.138.1 fixed
suse enterprise sap 15 SP7	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 12 SP5	11.0.31.0-3.99.1 fixed
suse enterprise server 15 SP4	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP5	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP6	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP7	11.0.31.0-150000.3.138.1 fixed

java-11-openjdk-devel

suse enterprise sap 15 SP4	11.0.31.0-150000.3.138.1 fixed
suse enterprise sap 15 SP5	11.0.31.0-150000.3.138.1 fixed
suse enterprise sap 15 SP7	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 12 SP5	11.0.31.0-3.99.1 fixed
suse enterprise server 15 SP4	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP5	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP6	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP7	11.0.31.0-150000.3.138.1 fixed

java-11-openjdk-headless

suse enterprise sap 15 SP4	11.0.31.0-150000.3.138.1 fixed
suse enterprise sap 15 SP5	11.0.31.0-150000.3.138.1 fixed
suse enterprise sap 15 SP7	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 12 SP5	11.0.31.0-3.99.1 fixed
suse enterprise server 15 SP4	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP5	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP6	11.0.31.0-150000.3.138.1 fixed
suse enterprise server 15 SP7	11.0.31.0-150000.3.138.1 fixed

java-17-openjdk

suse enterprise sap 15 SP4	17.0.19.0-150400.3.66.2 fixed
suse enterprise sap 15 SP5	17.0.19.0-150400.3.66.2 fixed
suse enterprise sap 15 SP7	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP4	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP5	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP6	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP7	17.0.19.0-150400.3.66.2 fixed

java-17-openjdk-demo

suse enterprise sap 15 SP4	17.0.19.0-150400.3.66.2 fixed
suse enterprise sap 15 SP5	17.0.19.0-150400.3.66.2 fixed
suse enterprise sap 15 SP7	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP4	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP5	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP6	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP7	17.0.19.0-150400.3.66.2 fixed

java-17-openjdk-devel

suse enterprise sap 15 SP4	17.0.19.0-150400.3.66.2 fixed
suse enterprise sap 15 SP5	17.0.19.0-150400.3.66.2 fixed
suse enterprise sap 15 SP7	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP4	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP5	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP6	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP7	17.0.19.0-150400.3.66.2 fixed

java-17-openjdk-headless

suse enterprise sap 15 SP4	17.0.19.0-150400.3.66.2 fixed
suse enterprise sap 15 SP5	17.0.19.0-150400.3.66.2 fixed
suse enterprise sap 15 SP7	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP4	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP5	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP6	17.0.19.0-150400.3.66.2 fixed
suse enterprise server 15 SP7	17.0.19.0-150400.3.66.2 fixed

java-1_8_0-openjdk

suse enterprise sap 15 SP4	1.8.0.492-150000.3.120.1 fixed
suse enterprise sap 15 SP5	1.8.0.492-150000.3.120.1 fixed
suse enterprise sap 15 SP7	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 12 SP3	1.8.0.492-27.128.1 fixed
suse enterprise server 12 SP5	1.8.0.492-27.128.1 fixed
suse enterprise server 15 SP4	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP5	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP6	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP7	1.8.0.492-150000.3.120.1 fixed

java-1_8_0-openjdk-demo

suse enterprise sap 15 SP4	1.8.0.492-150000.3.120.1 fixed
suse enterprise sap 15 SP5	1.8.0.492-150000.3.120.1 fixed
suse enterprise sap 15 SP7	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 12 SP3	1.8.0.492-27.128.1 fixed
suse enterprise server 12 SP5	1.8.0.492-27.128.1 fixed
suse enterprise server 15 SP4	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP5	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP6	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP7	1.8.0.492-150000.3.120.1 fixed

java-1_8_0-openjdk-devel

suse enterprise sap 15 SP4	1.8.0.492-150000.3.120.1 fixed
suse enterprise sap 15 SP5	1.8.0.492-150000.3.120.1 fixed
suse enterprise sap 15 SP7	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 12 SP3	1.8.0.492-27.128.1 fixed
suse enterprise server 12 SP5	1.8.0.492-27.128.1 fixed
suse enterprise server 15 SP4	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP5	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP6	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP7	1.8.0.492-150000.3.120.1 fixed

java-1_8_0-openjdk-headless

suse enterprise sap 15 SP4	1.8.0.492-150000.3.120.1 fixed
suse enterprise sap 15 SP5	1.8.0.492-150000.3.120.1 fixed
suse enterprise sap 15 SP7	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 12 SP3	1.8.0.492-27.128.1 fixed
suse enterprise server 12 SP5	1.8.0.492-27.128.1 fixed
suse enterprise server 15 SP4	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP5	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP6	1.8.0.492-150000.3.120.1 fixed
suse enterprise server 15 SP7	1.8.0.492-150000.3.120.1 fixed

java-21-openjdk

suse enterprise desktop 15 SP7	21.0.11.0-150600.3.26.1 fixed
suse enterprise sap 15 SP7	21.0.11.0-150600.3.26.1 fixed
suse enterprise server 15 SP6	21.0.11.0-150600.3.26.1 fixed
suse enterprise server 15 SP7	21.0.11.0-150600.3.26.1 fixed

java-21-openjdk-demo

suse enterprise desktop 15 SP7	21.0.11.0-150600.3.26.1 fixed
suse enterprise sap 15 SP7	21.0.11.0-150600.3.26.1 fixed
suse enterprise server 15 SP6	21.0.11.0-150600.3.26.1 fixed
suse enterprise server 15 SP7	21.0.11.0-150600.3.26.1 fixed

java-21-openjdk-devel

suse enterprise desktop 15 SP7	21.0.11.0-150600.3.26.1 fixed
suse enterprise sap 15 SP7	21.0.11.0-150600.3.26.1 fixed
suse enterprise server 15 SP6	21.0.11.0-150600.3.26.1 fixed
suse enterprise server 15 SP7	21.0.11.0-150600.3.26.1 fixed

java-21-openjdk-headless

suse enterprise desktop 15 SP7	21.0.11.0-150600.3.26.1 fixed
suse enterprise sap 15 SP7	21.0.11.0-150600.3.26.1 fixed
suse enterprise server 15 SP6	21.0.11.0-150600.3.26.1 fixed
suse enterprise server 15 SP7	21.0.11.0-150600.3.26.1 fixed

java-25-openjdk

suse enterprise desktop 15 SP7	25.0.3.0-150700.15.10.1 fixed
suse enterprise sap 15 SP7	25.0.3.0-150700.15.10.1 fixed
suse enterprise server 15 SP7	25.0.3.0-150700.15.10.1 fixed

java-25-openjdk-demo

suse enterprise desktop 15 SP7	25.0.3.0-150700.15.10.1 fixed
suse enterprise sap 15 SP7	25.0.3.0-150700.15.10.1 fixed
suse enterprise server 15 SP7	25.0.3.0-150700.15.10.1 fixed

java-25-openjdk-devel

suse enterprise desktop 15 SP7	25.0.3.0-150700.15.10.1 fixed
suse enterprise sap 15 SP7	25.0.3.0-150700.15.10.1 fixed
suse enterprise server 15 SP7	25.0.3.0-150700.15.10.1 fixed

java-25-openjdk-headless

suse enterprise desktop 15 SP7	25.0.3.0-150700.15.10.1 fixed
suse enterprise sap 15 SP7	25.0.3.0-150700.15.10.1 fixed
suse enterprise server 15 SP7	25.0.3.0-150700.15.10.1 fixed

Red Hat Enterprise Linux Releases

Red Hat Product

Release

java-1.8.0-ibm

RHEL 8

1:1.8.0.8.65-1.el8_10

fixed

java-1.8.0-ibm-demo

RHEL 8

1:1.8.0.8.65-1.el8_10

fixed

java-1.8.0-ibm-devel

RHEL 8

1:1.8.0.8.65-1.el8_10

fixed

java-1.8.0-ibm-headless

RHEL 8

1:1.8.0.8.65-1.el8_10

fixed

java-1.8.0-ibm-jdbc

RHEL 8

1:1.8.0.8.65-1.el8_10

fixed

java-1.8.0-ibm-plugin

RHEL 8

1:1.8.0.8.65-1.el8_10

fixed

java-1.8.0-ibm-src

RHEL 8

1:1.8.0.8.65-1.el8_10

fixed

java-1.8.0-ibm-webstart

RHEL 8

1:1.8.0.8.65-1.el8_10

fixed

java-1.8.0-openjdk

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-accessibility

RHEL 8

1:1.8.0.492.b09-1.el8

fixed

java-1.8.0-openjdk-accessibility-fastdebug

RHEL 8

1:1.8.0.492.b09-1.el8

fixed

java-1.8.0-openjdk-accessibility-slowdebug

RHEL 8

1:1.8.0.492.b09-1.el8

fixed

java-1.8.0-openjdk-demo

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-demo-fastdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-demo-slowdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-devel

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-devel-fastdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-devel-slowdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-fastdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-headless

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-headless-fastdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-headless-slowdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-javadoc

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-javadoc-zip

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-slowdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-src

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-src-fastdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-1.8.0-openjdk-src-slowdebug

RHEL 8	1:1.8.0.492.b09-1.el8 fixed
RHEL 9	1:1.8.0.492.b09-2.el9 fixed

java-17-openjdk

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-demo

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-demo-fastdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-demo-slowdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-devel

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-devel-fastdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-devel-slowdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-fastdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-headless

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-headless-fastdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-headless-slowdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-javadoc

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-javadoc-zip

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-jmods

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-jmods-fastdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-jmods-slowdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-slowdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-src

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-src-fastdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-src-slowdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-static-libs

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-static-libs-fastdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-17-openjdk-static-libs-slowdebug

RHEL 8	1:17.0.19.0.10-1.el8 fixed
RHEL 9	1:17.0.19.0.10-2.el9 fixed

java-21-openjdk

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-demo

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-demo-fastdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-demo-slowdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-devel

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-devel-fastdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-devel-slowdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-fastdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-headless

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-headless-fastdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-headless-slowdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-javadoc

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-javadoc-zip

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-jmods

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-jmods-fastdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-jmods-slowdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-slowdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-src

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-src-fastdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-src-slowdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-static-libs

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-static-libs-fastdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-21-openjdk-static-libs-slowdebug

RHEL 8	1:21.0.11.0.10-1.el8 fixed
RHEL 9	1:21.0.11.0.10-2.el9 fixed

java-25-openjdk

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-crypto-adapter

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-crypto-adapter-fastdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-crypto-adapter-slowdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-demo

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-demo-fastdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-demo-slowdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-devel

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-devel-fastdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-devel-slowdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-fastdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-headless

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-headless-fastdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-headless-slowdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-javadoc

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-javadoc-zip

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-jmods

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-jmods-fastdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-jmods-slowdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-slowdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-src

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-src-fastdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-src-slowdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-static-libs

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-static-libs-fastdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

java-25-openjdk-static-libs-slowdebug

RHEL 9

1:25.0.3.0.9-1.el9

fixed

Amazon Linux Releases

Amazon Package

Release

java-1.8.0-amazon-corretto

Amazon Linux 2023

1:1.8.0_492.b09-1.amzn2023

fixed

java-1.8.0-amazon-corretto-debugsymbols

Amazon Linux 2023

1:1.8.0_492.b09-1.amzn2023

fixed

java-1.8.0-amazon-corretto-devel

Amazon Linux 2023

1:1.8.0_492.b09-1.amzn2023

fixed

java-1.8.0-openjdk

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-accessibility

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-accessibility-debug

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-debug

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-debuginfo

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-demo

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-demo-debug

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-devel

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-devel-debug

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-headless

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-headless-debug

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-javadoc

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-javadoc-debug

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-javadoc-zip

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-javadoc-zip-debug

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-src

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

java-1.8.0-openjdk-src-debug

Amazon Linux 2

1:1.8.0.492.b09-1.amzn2.0.1

fixed

Common Weakness Enumeration

Vulnerability Media Exposure

References

https://www.oracle.com/security-alerts/cpuapr2026.html

https://access.redhat.com/errata/RHSA-2026:11403

https://access.redhat.com/errata/RHSA-2026:11655

https://access.redhat.com/errata/RHSA-2026:11822

https://access.redhat.com/errata/RHSA-2026:11829

https://access.redhat.com/errata/RHSA-2026:11902

https://access.redhat.com/errata/RHSA-2026:22139

https://access.redhat.com/errata/RHSA-2026:22328

https://access.redhat.com/errata/RHSA-2026:9254

https://access.redhat.com/errata/RHSA-2026:9256

https://access.redhat.com/errata/RHSA-2026:9682

https://access.redhat.com/errata/RHSA-2026:9683

https://access.redhat.com/errata/RHSA-2026:9684

https://access.redhat.com/errata/RHSA-2026:9686

https://access.redhat.com/errata/RHSA-2026:9687

https://access.redhat.com/errata/RHSA-2026:9688

https://access.redhat.com/errata/RHSA-2026:9689

https://access.redhat.com/errata/RHSA-2026:9691

https://access.redhat.com/errata/RHSA-2026:9693

https://access.redhat.com/errata/RHSA-2026:9694

https://access.redhat.com/security/cve/CVE-2026-22016

https://bugzilla.redhat.com/show_bug.cgi?id=2460039

https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22016.json