Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8…
高危 CVSS 7.5
摘要
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u481, 8u481-b50, 8u481-perf, 11.0.30, 17.0.18, 21.0.10, 25.0.2, 26; Oracle GraalVM for JDK: 17.0.18 and 21.0.10; Oracle GraalVM Enterprise Edition: 21.3.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Orac…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
- :
- :
数据来源
- NVD DATABASE
原始链接
- https://www.oracle.com/security-alerts/cpuapr2026.html Vendor Advisory
- https://access.redhat.com/errata/RHSA-2026:11403
- https://access.redhat.com/errata/RHSA-2026:11655
- https://access.redhat.com/errata/RHSA-2026:11822
- https://access.redhat.com/errata/RHSA-2026:11829
- https://access.redhat.com/errata/RHSA-2026:11902
- https://access.redhat.com/errata/RHSA-2026:22139
- https://access.redhat.com/errata/RHSA-2026:22328
- https://access.redhat.com/errata/RHSA-2026:9254
- https://access.redhat.com/errata/RHSA-2026:9682
- https://access.redhat.com/errata/RHSA-2026:9683
- https://access.redhat.com/errata/RHSA-2026:9684
- https://access.redhat.com/errata/RHSA-2026:9686
- https://access.redhat.com/errata/RHSA-2026:9687
- https://access.redhat.com/errata/RHSA-2026:9688
- https://access.redhat.com/errata/RHSA-2026:9689
- https://access.redhat.com/errata/RHSA-2026:9691
- https://access.redhat.com/errata/RHSA-2026:9693
- https://access.redhat.com/errata/RHSA-2026:9694
- https://access.redhat.com/security/cve/CVE-2026-22016
- https://bugzilla.redhat.com/show_bug.cgi?id=2460039
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-22016.json
时间线
- nvd_ingest NVD