Vulnerability · Published Oct 20, 2026 · Assigned by oracle
CVE-2026-91487
Medium 4.8
In plain English
A medium-severity improper access control in Oracle Java SE from Oracle Corporation. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 6% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS 3.1)4.8Medium
Exploit odds (30 days)0.2%top 93.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data as well as unauthorized read access to a subset of Oracle Java SE accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| AlmaLinux:8 | java-17-openjdk | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-demo | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-demo | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-demo-fastdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-demo-slowdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-devel | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-devel | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-devel-fastdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-devel-slowdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-fastdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-headless | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-headless | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-headless-fastdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-headless-slowdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-javadoc | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-javadoc-zip | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-jmods | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-jmods | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-jmods-fastdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-jmods-slowdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-slowdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-src | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-src | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-src-fastdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-src-slowdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-static-libs | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-static-libs-fastdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 1:17.0.21.0.9-2.1.el8 | ALSA-2026:88352 |
| AlmaLinux:9 | java-17-openjdk-static-libs-slowdebug | 1:17.0.21.0.9-2.2.el9.alma.1 | ALSA-2026:90500 |
| AlmaLinux:10 | java-21-openjdk | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:8 | java-21-openjdk | 1:21.0.13.0.9-1.1.el8 | ALSA-2026:88349 |
| AlmaLinux:9 | java-21-openjdk | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-demo | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-demo | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-demo-fastdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-demo-fastdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-demo-slowdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-demo-slowdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-devel | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-devel | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-devel-fastdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-devel-fastdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-devel-slowdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-devel-slowdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-fastdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-fastdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-headless | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-headless | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-headless-fastdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-headless-fastdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-headless-slowdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-headless-slowdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-javadoc | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-javadoc | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-javadoc-zip | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-javadoc-zip | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-jmods | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-jmods | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-jmods-fastdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-jmods-fastdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-jmods-slowdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-jmods-slowdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-slowdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-slowdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-src | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-src | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-src-fastdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-src-fastdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-src-slowdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-src-slowdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-static-libs | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-static-libs | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-static-libs-fastdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-static-libs-fastdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-21-openjdk-static-libs-slowdebug | 1:21.0.13.0.9-1.2.el10.alma.1 | ALSA-2026:90504 |
| AlmaLinux:9 | java-21-openjdk-static-libs-slowdebug | 1:21.0.13.0.9-1.2.el9.alma.1 | ALSA-2026:88349 |
| AlmaLinux:10 | java-25-openjdk | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter-fastdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-crypto-adapter-slowdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-demo | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-demo | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-demo-fastdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-demo-fastdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-demo-slowdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-demo-slowdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-devel | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-devel | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-devel-fastdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-devel-fastdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-devel-slowdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-devel-slowdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-fastdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-fastdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-headless | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-headless | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-headless-fastdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-headless-fastdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-headless-slowdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-headless-slowdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-javadoc | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-javadoc | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-javadoc-zip | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-javadoc-zip | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-jmods | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-jmods | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-jmods-fastdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-jmods-fastdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-jmods-slowdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-jmods-slowdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-slowdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-slowdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-src | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-src | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-src-fastdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-src-fastdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-src-slowdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-src-slowdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-static-libs | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-static-libs | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-static-libs-fastdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-static-libs-fastdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| AlmaLinux:10 | java-25-openjdk-static-libs-slowdebug | 1:25.0.5.0.8-1.0.el10.alma.1 | ALSA-2026:88347 |
| AlmaLinux:9 | java-25-openjdk-static-libs-slowdebug | 1:25.0.5.0.8-1.0.el9.alma.1 | ALSA-2026:88347 |
| Alpine:v3.23 | openjdk21 | 21.0.13.0.3_p1-r0 | ALPINE-CVE-2026-91487 |
| Alpine:v3.24 | openjdk21 | 21.0.13.0.3_p1-r0 | ALPINE-CVE-2026-91487 |
| Alpine:v3.23 | openjdk25 | 25.0.5.0.3_p1-r0 | ALPINE-CVE-2026-91487 |
| Alpine:v3.24 | openjdk25 | 25.0.5.0.3_p1-r0 | ALPINE-CVE-2026-91487 |
| Debian:12 | openjdk-17 | 17.0.21+9-1~deb12u1 | DEBIAN-CVE-2026-91487 |
| Debian:13 | openjdk-21 | 21.0.13+9-1~deb13u2 | DEBIAN-CVE-2026-91487 |
| Debian:14 | openjdk-21 | 21.0.13+9-1 | DEBIAN-CVE-2026-91487 |
| Debian:13 | openjdk-25 | 25.0.5+8-1~deb13u1 | DEBIAN-CVE-2026-91487 |
| Debian:14 | openjdk-25 | 25.0.5+8-1 | DEBIAN-CVE-2026-91487 |
| Debian:14 | openjdk-27 | no fix listed | DEBIAN-CVE-2026-91487 |
| Rocky Linux:8 | java-17-openjdk | 1:17.0.21.0.9-2.1.el8_10 | RLSA-2026:88352 |
| Rocky Linux:9 | java-25-openjdk | 1:25.0.5.0.8-1.0.el9_8 | RLSA-2026:88347 |
| Ubuntu:22.04:LTS | openjdk-17 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:24.04:LTS | openjdk-17 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.04:LTS | openjdk-17 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.10 | openjdk-17 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.04:LTS | openjdk-17-crac | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.10 | openjdk-17-crac | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:22.04:LTS | openjdk-18 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:22.04:LTS | openjdk-21 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:24.04:LTS | openjdk-21 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.04:LTS | openjdk-21 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.10 | openjdk-21 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.04:LTS | openjdk-21-crac | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.10 | openjdk-21-crac | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:22.04:LTS | openjdk-25 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:24.04:LTS | openjdk-25 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.04:LTS | openjdk-25 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.10 | openjdk-25 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.10 | openjdk-27 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:22.04:LTS | openjdk-8 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:24.04:LTS | openjdk-8 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.04:LTS | openjdk-8 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.10 | openjdk-8 | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:22.04:LTS | openjdk-lts | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.04:LTS | openjdk-lts | no fix listed | UBUNTU-CVE-2026-91487 |
| Ubuntu:26.10 | openjdk-lts | no fix listed | UBUNTU-CVE-2026-91487 |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Oracle Corporation | Oracle Java SE | 8u503-perf11.0.32.117.0.20.121.0.12.125.0.4.127 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N
References
- Oracle Advisory vendor-advisory