Vulnerability · Published Jul 21, 2026 · Assigned by oracle
CVE-2026-46917
Medium 5.3
In plain English
A medium-severity improper access control in Oracle GraalVM Enterprise Edition from Oracle Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | java-17-openjdk | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-demo | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-demo | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-demo-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-demo-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-devel | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-devel | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-devel-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-devel-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-headless | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-headless | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-headless-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-headless-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-javadoc | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-javadoc-zip | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-jmods | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-jmods | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-jmods-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-jmods-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-src | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-src | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-src-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-src-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-static-libs | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-static-libs-fastdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 1:17.0.20.0.8-1.1.el8 | ALSA-2026:42887 |
| AlmaLinux:9 | java-17-openjdk-static-libs-slowdebug | 1:17.0.20.0.8-1.2.el9.alma.1 | ALSA-2026:42887 |
| AlmaLinux:10 | java-21-openjdk | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-demo | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-demo | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-demo | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-demo-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-demo-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-demo-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-demo-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-demo-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-demo-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-devel | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-devel | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-devel | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-devel-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-devel-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-devel-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-devel-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-devel-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-devel-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-headless | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-headless | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-headless | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-headless-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-headless-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-headless-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-headless-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-headless-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-headless-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-javadoc | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-javadoc | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-javadoc | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-javadoc-zip | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-javadoc-zip | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-javadoc-zip | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-jmods | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-jmods | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-jmods | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-jmods-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-jmods-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-jmods-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-jmods-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-jmods-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-jmods-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-src | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-src | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-src | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-src-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-src-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-src-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-src-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-src-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-src-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-static-libs | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-static-libs | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-static-libs | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-static-libs-fastdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-static-libs-fastdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-static-libs-fastdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-21-openjdk-static-libs-slowdebug | 1:21.0.12.0.8-1.2.el10_2.alma.2 | ALSA-2026:42895 |
| AlmaLinux:8 | java-21-openjdk-static-libs-slowdebug | 1:21.0.12.0.8-1.1.el8 | ALSA-2026:42895 |
| AlmaLinux:9 | java-21-openjdk-static-libs-slowdebug | 1:21.0.12.0.8-1.2.el9.alma.2 | ALSA-2026:42895 |
| AlmaLinux:10 | java-25-openjdk | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-demo | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-demo | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-demo-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-demo-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-demo-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-demo-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-devel | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-devel | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-devel-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-devel-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-devel-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-devel-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-headless | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-headless | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-headless-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-headless-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-headless-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-headless-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-javadoc | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-javadoc | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-javadoc-zip | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-javadoc-zip | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-jmods | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-jmods | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-jmods-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-jmods-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-jmods-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-jmods-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-src | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-src | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-src-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-src-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-src-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-src-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-static-libs | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-static-libs | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-static-libs-fastdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-static-libs-fastdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| AlmaLinux:10 | java-25-openjdk-static-libs-slowdebug | 1:25.0.4.0.7-1.1.el10_2.alma.1 | ALSA-2026:42899 |
| AlmaLinux:9 | java-25-openjdk-static-libs-slowdebug | 1:25.0.4.0.7-1.1.el9.alma.1 | ALSA-2026:42899 |
| Alpine:v3.23 | openjdk11 | 11.0.32_p9-r0 | ALPINE-CVE-2026-46917 |
| Alpine:v3.24 | openjdk11 | 11.0.32_p9-r0 | ALPINE-CVE-2026-46917 |
| Alpine:v3.23 | openjdk17 | 17.0.20_p8-r0 | ALPINE-CVE-2026-46917 |
| Alpine:v3.24 | openjdk17 | 17.0.20_p8-r0 | ALPINE-CVE-2026-46917 |
| Alpine:v3.23 | openjdk21 | 21.0.12_p8-r0 | ALPINE-CVE-2026-46917 |
| Alpine:v3.24 | openjdk21 | 21.0.12_p8-r0 | ALPINE-CVE-2026-46917 |
| Alpine:v3.23 | openjdk25 | 25.0.4_p7-r0 | ALPINE-CVE-2026-46917 |
| Alpine:v3.24 | openjdk25 | 25.0.4_p7-r0 | ALPINE-CVE-2026-46917 |
| Debian:12 | openjdk-17 | 17.0.20+8-1~deb12u1 | DEBIAN-CVE-2026-46917 |
| Debian:13 | openjdk-21 | 21.0.12+8-1~deb13u1 | DEBIAN-CVE-2026-46917 |
| Debian:14 | openjdk-21 | 21.0.12+8-1 | DEBIAN-CVE-2026-46917 |
| Debian:13 | openjdk-25 | 25.0.4+7-1~deb13u1 | DEBIAN-CVE-2026-46917 |
| Debian:14 | openjdk-25 | 25.0.4+7-1 | DEBIAN-CVE-2026-46917 |
| Rocky Linux:8 | java-17-openjdk | 1:17.0.20.0.8-1.1.el8_10 | RLSA-2026:42887 |
| Rocky Linux:9 | java-25-openjdk | 1:25.0.4.0.7-1.1.el9_8 | RLSA-2026:42899 |
| Ubuntu:22.04:LTS | openjdk-17 | 17.0.20+8-1~22.04 | USN-8676-1 |
| Ubuntu:22.04:LTS | openjdk-17 | 17.0.20+8-1~22.04 | UBUNTU-CVE-2026-46917 |
| Ubuntu:24.04:LTS | openjdk-17 | 17.0.20+8-1~24.04 | USN-8676-1 |
| Ubuntu:24.04:LTS | openjdk-17 | 17.0.20+8-1~24.04 | UBUNTU-CVE-2026-46917 |
| Ubuntu:26.04:LTS | openjdk-17 | 17.0.20+8-1~26.04 | USN-8676-1 |
| Ubuntu:26.04:LTS | openjdk-17 | 17.0.20+8-1~26.04 | UBUNTU-CVE-2026-46917 |
| Ubuntu:26.10 | openjdk-17 | 17.0.20+8-1 | UBUNTU-CVE-2026-46917 |
| Ubuntu:26.04:LTS | openjdk-17-crac | 17.0.20+8-0ubuntu1~26.04 | UBUNTU-CVE-2026-46917 |
| Ubuntu:26.04:LTS | openjdk-17-crac | 17.0.20+8-0ubuntu1~26.04 | USN-8693-1 |
| Ubuntu:26.10 | openjdk-17-crac | no fix listed | UBUNTU-CVE-2026-46917 |
| Ubuntu:22.04:LTS | openjdk-18 | no fix listed | UBUNTU-CVE-2026-46917 |
| Ubuntu:22.04:LTS | openjdk-21 | 21.0.12+8-1~22.04 | USN-8677-1 |
| Ubuntu:22.04:LTS | openjdk-21 | 21.0.12+8-1~22.04 | UBUNTU-CVE-2026-46917 |
| Ubuntu:24.04:LTS | openjdk-21 | 21.0.12+8-1~24.04 | USN-8677-1 |
| Ubuntu:24.04:LTS | openjdk-21 | 21.0.12+8-1~24.04 | UBUNTU-CVE-2026-46917 |
| Ubuntu:26.04:LTS | openjdk-21 | 21.0.12+8-1~26.04 | USN-8677-1 |
| Ubuntu:26.04:LTS | openjdk-21 | 21.0.12+8-1~26.04 | UBUNTU-CVE-2026-46917 |
| Ubuntu:26.10 | openjdk-21 | 21.0.12+8-1 | UBUNTU-CVE-2026-46917 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | Oracle Java SE | 11.0.3117.0.1921.0.1125.0.326.0.1 |
| Oracle Corporation | Oracle GraalVM for JDK | 17.0.1921.0.11 |
| Oracle Corporation | Oracle GraalVM Enterprise Edition | 21.3.18 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
References
- Oracle Advisory vendor-advisory