Vulnerability · Published Apr 21, 2026 · Assigned by oracle
CVE-2026-34282
High 7.5
In plain English
A high-severity uncontrolled resource consumption in Oracle GraalVM Enterprise Edition from Oracle Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.6%top 49.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | java-17-openjdk | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-demo | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-demo | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-demo-fastdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-demo-slowdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-devel | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-devel | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-devel-fastdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-devel-slowdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-fastdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-headless | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-headless | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-headless-fastdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-headless-slowdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-javadoc | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-javadoc-zip | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-jmods | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-jmods | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-jmods-fastdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-jmods-slowdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-slowdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-src | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-src | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-src-fastdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-src-slowdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-static-libs | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-static-libs-fastdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 1:17.0.19.0.10-1.el8 | ALSA-2026:9686 |
| AlmaLinux:9 | java-17-openjdk-static-libs-slowdebug | 1:17.0.19.0.10-2.el9.alma.1 | ALSA-2026:9686 |
| AlmaLinux:10 | java-21-openjdk | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-demo | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-demo | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-demo | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-demo-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-demo-fastdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-demo-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-demo-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-demo-slowdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-demo-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-devel | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-devel | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-devel | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-devel-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-devel-fastdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-devel-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-devel-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-devel-slowdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-devel-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-fastdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-headless | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-headless | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-headless | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-headless-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-headless-fastdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-headless-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-headless-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-headless-slowdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-headless-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-javadoc | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-javadoc | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-javadoc | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-javadoc-zip | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-javadoc-zip | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-javadoc-zip | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-jmods | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-jmods | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-jmods | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-jmods-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-jmods-fastdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-jmods-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-jmods-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-jmods-slowdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-jmods-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-slowdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-src | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-src | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-src | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-src-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-src-fastdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-src-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-src-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-src-slowdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-src-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-static-libs | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-static-libs | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-static-libs | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-static-libs-fastdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-static-libs-fastdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-static-libs-fastdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-21-openjdk-static-libs-slowdebug | 1:21.0.11.0.10-2.el10_2.alma.1 | ALSA-2026:9689 |
| AlmaLinux:8 | java-21-openjdk-static-libs-slowdebug | 1:21.0.11.0.10-1.el8 | ALSA-2026:9689 |
| AlmaLinux:9 | java-21-openjdk-static-libs-slowdebug | 1:21.0.11.0.10-2.el9.alma.1 | ALSA-2026:9689 |
| AlmaLinux:10 | java-25-openjdk | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-demo | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-demo | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-demo-fastdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-demo-fastdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-demo-slowdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-demo-slowdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-devel | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-devel | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-devel-fastdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-devel-fastdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-devel-slowdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-devel-slowdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-fastdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-fastdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-headless | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-headless | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-headless-fastdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-headless-fastdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-headless-slowdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-headless-slowdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-javadoc | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-javadoc | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-javadoc-zip | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-javadoc-zip | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-jmods | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-jmods | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-jmods-fastdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-jmods-fastdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-jmods-slowdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-jmods-slowdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-slowdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-slowdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-src | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-src | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-src-fastdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-src-fastdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-src-slowdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-src-slowdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-static-libs | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-static-libs | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-static-libs-fastdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-static-libs-fastdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| AlmaLinux:10 | java-25-openjdk-static-libs-slowdebug | 1:25.0.3.0.9-1.el10_2 | ALSA-2026:9693 |
| AlmaLinux:9 | java-25-openjdk-static-libs-slowdebug | 1:25.0.3.0.9-1.el9.alma.1 | ALSA-2026:9693 |
| Alpine:v3.22 | openjdk11 | 11.0.31_p11-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.23 | openjdk11 | 11.0.31_p11-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.24 | openjdk11 | 11.0.31_p11-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.22 | openjdk17 | 17.0.19_p10-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.23 | openjdk17 | 17.0.19_p10-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.24 | openjdk17 | 17.0.19_p10-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.22 | openjdk21 | 21.0.11_p10-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.23 | openjdk21 | 21.0.11_p10-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.24 | openjdk21 | 21.0.11_p10-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.23 | openjdk25 | 25.0.3_p9-r0 | ALPINE-CVE-2026-34282 |
| Alpine:v3.24 | openjdk25 | 25.0.3_p9-r0 | ALPINE-CVE-2026-34282 |
| Debian:12 | openjdk-17 | 17.0.19+10-1~deb12u2 | DEBIAN-CVE-2026-34282 |
| Debian:13 | openjdk-21 | 21.0.11+10-1~deb13u2 | DEBIAN-CVE-2026-34282 |
| Debian:14 | openjdk-21 | 21.0.11+10-1 | DEBIAN-CVE-2026-34282 |
| Debian:13 | openjdk-25 | 25.0.3+9-2~deb13u1 | DEBIAN-CVE-2026-34282 |
| Debian:14 | openjdk-25 | 25.0.3+9-1 | DEBIAN-CVE-2026-34282 |
| Rocky Linux:8 | java-17-openjdk | 1:17.0.19.0.10-1.el8_10 | RLSA-2026:9686 |
| Rocky Linux:9 | java-21-openjdk | 1:21.0.11.0.10-2.el9_7 | RLSA-2026:9689 |
| Rocky Linux:10 | java-25-openjdk | 1:25.0.3.0.9-1.el10_1 | RLSA-2026:9693 |
| Ubuntu:22.04:LTS | openjdk-17 | 17.0.19+10-1~22.04.2 | UBUNTU-CVE-2026-34282 |
| Ubuntu:24.04:LTS | openjdk-17 | 17.0.19+10-1~24.04.2 | UBUNTU-CVE-2026-34282 |
| Ubuntu:25.10 | openjdk-17 | 17.0.19+10-1~25.10.2 | UBUNTU-CVE-2026-34282 |
| Ubuntu:26.04:LTS | openjdk-17 | 17.0.19+10-1~26.04.2 | UBUNTU-CVE-2026-34282 |
| Ubuntu:25.10 | openjdk-17-crac | 17.0.19+10-0ubuntu1~25.10.1 | UBUNTU-CVE-2026-34282 |
| Ubuntu:26.04:LTS | openjdk-17-crac | 17.0.19+10-0ubuntu1~26.04.1 | UBUNTU-CVE-2026-34282 |
| Ubuntu:26.10 | openjdk-17-crac | no fix listed | UBUNTU-CVE-2026-34282 |
| Ubuntu:22.04:LTS | openjdk-18 | no fix listed | UBUNTU-CVE-2026-34282 |
| Ubuntu:22.04:LTS | openjdk-21 | 21.0.11+10-1~22.04.2 | UBUNTU-CVE-2026-34282 |
| Ubuntu:24.04:LTS | openjdk-21 | 21.0.11+10-1~24.04.2 | UBUNTU-CVE-2026-34282 |
| Ubuntu:25.10 | openjdk-21 | 21.0.11+10-1~25.10.2 | UBUNTU-CVE-2026-34282 |
| Ubuntu:26.04:LTS | openjdk-21 | 21.0.11+10-1~26.04.2 | UBUNTU-CVE-2026-34282 |
| Ubuntu:25.10 | openjdk-21-crac | 21.0.11+10-0ubuntu1~25.10.1 | UBUNTU-CVE-2026-34282 |
| Ubuntu:26.04:LTS | openjdk-21-crac | 21.0.11+10-0ubuntu1~26.04.1 | UBUNTU-CVE-2026-34282 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | Oracle Java SE | 8u481-perf11.0.3017.0.1821.0.1025.0.226 |
| Oracle Corporation | Oracle GraalVM for JDK | 17.0.1821.0.10 |
| Oracle Corporation | Oracle GraalVM Enterprise Edition | 21.3.17 |
Weakness: CWE-400, CWE-835 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
References
- Oracle Advisory vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-34282 vdb-entry, x_refsource_REDHAT
- RHBZ#2460044 issue-tracking, x_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-34282.json x_sadp-csaf-vex
- https://access.redhat.com/errata/RHSA-2026:9254 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9689 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9693 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9686 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9688 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9687 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9691 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:9694 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11655 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11403 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11902 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11829 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:22328 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/errata/RHSA-2026:11822 vendor-advisory, x_refsource_REDHAT