Oracle Java SE: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 12

• High 7.5
  CVE-2026-20652

  The issue was addressed with improved memory handling. This issue is fixed in Safari 26.3, iOS 18.7.5 and iPadOS 18.7.5…

  Apple macOS iOS and iPadOS visionOS macOS iOS Browsers Debian Ubuntu
  Feb 11, 2026
• High 7.5
  CVE-2026-22016 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• High 7.5
  CVE-2026-34282

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Medium 6.0
  CVE-2026-22003 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). …

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition openjdk-9 Ubuntu
  Apr 21, 2026
• Medium 5.3
  CVE-2026-22013 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-22021

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Medium 5.3
  CVE-2026-23865

  An integer overflow in the tt_var_load_item_variation_store function of the Freetype library in versions 2.13.2 and 2.1…

  FreeType FreeType openjdk-8 openjdk-lts Debian Ubuntu Azure Linux Alpine Wolfi
  Mar 2, 2026
• Medium 4.6
  CVE-2026-28330

  SolarWinds Observability Self-Hosted Cross-Site Scripting Vulnerability

  SolarWinds Observability Self-Hosted was found to be affected by a stored Cross-Site Scripting (XSS) vulnerability that allows authenticated attackers to inject malicious content or JavaScript, which is displayed or executed in the browsers of other authentic…

  SolarWinds SolarWinds Observability Self-Hosted
  Oct 20, 2026
• Low 3.7
  CVE-2026-22008 Public exploit

  Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.…

  Oracle Oracle Java SE openjdk-9 openjdk-13 Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Low 3.7
  CVE-2026-22018 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Low 2.9
  CVE-2026-22007 Public exploit

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026
• Low 2.9
  CVE-2026-34268

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java S…

  Oracle Oracle Java SE Oracle GraalVM Enterprise Edition Oracle GraalVM for JDK Debian Ubuntu Alpine Wolfi
  Apr 21, 2026

Revision history

1. 2026-10-27 #46

   Neue Updates von CVE aufgenommen

2. 2026-09-28 #45

   Neue Updates aufgenommen

3. 2026-09-15 #44

   Neue Updates von IBM aufgenommen

4. 2026-09-13 #43

   Neue Updates von IBM aufgenommen

5. 2026-09-07 #42

   Neue Updates von IBM aufgenommen

6. 2026-09-03 #41

   Neue Updates von Dell aufgenommen

7. 2026-09-01 #40

   Neue Updates von IBM aufgenommen

8. 2026-08-31 #39

   Neue Updates von Dell aufgenommen

9. 2026-08-25 #38

   Neue Updates aufgenommen

10. 2026-08-12 #37

    Neue Updates von Gentoo aufgenommen

11. 2026-07-12 #36

    Neue Updates von IBM aufgenommen

12. 2026-07-08 #35

    Neue Updates von IBM aufgenommen

13. 2026-07-07 #34

    Neue Updates von IBM aufgenommen

14. 2026-07-02 #33

    Neue Updates von Dell aufgenommen

15. 2026-07-01 #32

    Neue Updates von IBM aufgenommen

16. 2026-06-28 #31

    Neue Updates von IBM aufgenommen

17. 2026-06-24 #30

    Neue Updates von SUSE und IBM aufgenommen

18. 2026-06-22 #29

    Neue Updates von IBM aufgenommen

19. 2026-06-21 #28

    Neue Updates von IBM aufgenommen

20. 2026-06-18 #27

    Neue Updates von SUSE aufgenommen

21. 2026-06-15 #26

    Neue Updates von openSUSE aufgenommen

22. 2026-06-11 #25

    Neue Updates von IBM aufgenommen

23. 2026-06-09 #24

    Neue Updates aufgenommen

24. 2026-06-02 #23

    Neue Updates von IBM aufgenommen

25. 2026-06-01 #22

    Neue Updates von Red Hat und openSUSE aufgenommen

References

• Oracle Critical Patch Update Advisory - April 2026 - Appendix Oracle Java SE vom 2026-04-21
  https://www.oracle.com/security-alerts/cpuapr2026.html#AppendixJAVA
• Azul Zulu builds of OpenJDK April 2026 Quarterly Update vom 2026-04-21
  https://docs.azul.com/core/release-notes
• OpenJDK Vulnerability Advisory: 2026/04/21
  https://openjdk.org/groups/vulnerability/advisories/2026-04-21
• Red Hat Security Advisory RHSA-2026:9254 vom 2026-04-22
  https://access.redhat.com/errata/RHSA-2026:9254
• Red Hat Security Advisory RHSA-2026:9693 vom 2026-04-22
  https://access.redhat.com/errata/RHSA-2026:9693
• Red Hat Security Advisory RHSA-2026:9682 vom 2026-04-22
  https://access.redhat.com/errata/RHSA-2026:9682
• Red Hat Security Advisory RHSA-2026:9256 vom 2026-04-22
  https://access.redhat.com/errata/RHSA-2026:9256
• Red Hat Security Advisory RHSA-2026:9255 vom 2026-04-22
  https://access.redhat.com/errata/RHSA-2026:9255
• Red Hat Security Advisory RHSA-2026:7286 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:7286
• Red Hat Security Advisory RHSA-2026:9685 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:9685
• Red Hat Security Advisory RHSA-2026:9691 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:9691
• Red Hat Security Advisory RHSA-2026:9694 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:9694
• Red Hat Security Advisory RHSA-2026:9690 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:9690
• Oracle Linux Security Advisory ELSA-2026-9693 vom 2026-04-23
  https://linux.oracle.com/errata/ELSA-2026-9693.html
• Red Hat Security Advisory RHSA-2026:9688 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:9688
• Red Hat Security Advisory RHSA-2026:9687 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:9687
• Red Hat Security Advisory RHSA-2026:9684 vom 2026-04-23
  https://access.redhat.com/errata/RHSA-2026:9684
• Red Hat Security Advisory RHSA-2026:9686 vom 2026-04-24
  https://access.redhat.com/errata/RHSA-2026:9686
• IBM Security Bulletin 7270697 vom 2026-04-24
  https://www.ibm.com/support/pages/node/7270697
• Oracle Linux Security Advisory ELSA-2026-9686 vom 2026-04-24
  https://linux.oracle.com/errata/ELSA-2026-9686.html
• Red Hat Security Advisory RHSA-2026:9683 vom 2026-04-24
  https://access.redhat.com/errata/RHSA-2026:9683
• Red Hat Security Advisory RHSA-2026:9689 vom 2026-04-24
  https://access.redhat.com/errata/RHSA-2026:9689
• Oracle Linux Security Advisory ELSA-2026-9683 vom 2026-04-27
  https://linux.oracle.com/errata/ELSA-2026-9683.html
• Rocky Linux Security Advisory RLSA-2026:9689 vom 2026-04-28
  https://errata.build.resf.org/RLSA-2026:9689
• IBM Security Bulletin 7270877 vom 2026-04-27
  https://www.ibm.com/support/pages/node/7270877
• Oracle Linux Security Advisory ELSA-2026-9689 vom 2026-04-28
  https://linux.oracle.com/errata/ELSA-2026-9689.html
• Debian Security Advisory DSA-6231 vom 2026-04-28
  https://security-tracker.debian.org/tracker/DSA-6231-1
• Red Hat Security Advisory RHSA-2026:11329 vom 2026-04-28
  https://access.redhat.com/errata/RHSA-2026:11329
• Red Hat Security Advisory RHSA-2026:11403 vom 2026-04-28
  https://access.redhat.com/errata/RHSA-2026:11403
• Debian Security Advisory DSA-6237 vom 2026-04-29
  https://lists.debian.org/debian-security-announce/2026/msg00147.html
• NetApp Security Advisory NTAP-20260429-0012 vom 2026-04-29
  https://security.netapp.com/advisory/NTAP-20260429-0012
• Red Hat Security Advisory RHSA-2026:11655 vom 2026-04-29
  https://access.redhat.com/errata/RHSA-2026:11655
• openSUSE Security Update OPENSUSE-SU-2026:10639-1 vom 2026-04-30
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/W2Y645E54E6XFIST2UBUB4OLOXHMIOLS/
• Red Hat Security Advisory RHSA-2026:11902 vom 2026-04-30
  https://access.redhat.com/errata/RHSA-2026:11902
• Red Hat Security Advisory RHSA-2026:11829 vom 2026-04-30
  https://access.redhat.com/errata/RHSA-2026:11829
• Red Hat Security Advisory RHSA-2026:11822 vom 2026-04-30
  https://access.redhat.com/errata/RHSA-2026:11822
• Red Hat Security Advisory RHSA-2026:11822 vom 2026-05-01
  https://access.redhat.com/errata/RHSA-2026:11822
• openSUSE Security Update OPENSUSE-SU-2026:10656-1 vom 2026-05-01
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JTBQPRECSOLUZMDIPNPEKSCKSOKTSRBX/
• Debian Security Advisory DSA-6246 vom 2026-05-04
  https://lists.debian.org/debian-security-announce/2026/msg00157.html
• SUSE Security Update SUSE-SU-2026:1705-1 vom 2026-05-06
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025854.html
• Debian Security Advisory DLA-4566 vom 2026-05-06
  https://lists.debian.org/debian-lts-announce/2026/05/msg00010.html
• Red Hat Security Advisory RHSA-2026:14391 vom 2026-05-07
  https://access.redhat.com/errata/RHSA-2026:14391
• Debian Security Advisory DLA-4565 vom 2026-05-06
  https://lists.debian.org/debian-lts-announce/2026/05/msg00009.html
• SUSE Security Update SUSE-SU-2026:1703-1 vom 2026-05-06
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025856.html
• Red Hat Security Advisory RHSA-2026:14659 vom 2026-05-07
  https://access.redhat.com/errata/RHSA-2026:14659
• SUSE Security Update SUSE-SU-2026:1704-1 vom 2026-05-06
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025855.html
• IBM Security Bulletin 7272269 vom 2026-05-07
  https://www.ibm.com/support/pages/node/7272269
• IBM Security Bulletin 7272299 vom 2026-05-07
  https://www.ibm.com/support/pages/node/7272299
• IBM Security Bulletin 7272328 vom 2026-05-07
  https://www.ibm.com/support/pages/node/7272328
• IBM Security Bulletin 7272397 vom 2026-05-08
  https://www.ibm.com/support/pages/node/7272397
• SUSE Security Update SUSE-SU-2026:1731-1 vom 2026-05-07
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025933.html
• SUSE Security Update SUSE-SU-2026:1732-1 vom 2026-05-07
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025932.html
• openSUSE Security Update OPENSUSE-SU-2026:10727-1 vom 2026-05-10
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/KTLULMCU2QOCFHMKGKXBCTCRU44HEPXF/
• Amazon Linux Security Advisory ALAS2-2026-3299 vom 2026-05-09
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3299.html
• openSUSE Security Update OPENSUSE-SU-2026:10725-1 vom 2026-05-10
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2M4F7ZTRQTCAO3T4RSWQHVO3A62HCU4W/
• Amazon Linux Security Advisory ALAS2CORRETTO8-2026-023 vom 2026-05-09
  https://alas.aws.amazon.com/AL2/ALAS2CORRETTO8-2026-023.html
• openSUSE Security Update OPENSUSE-SU-2026:10726-1 vom 2026-05-10
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/JZADYTZHBW5JHFOOY3QKVO2SFZF2FEKA/
• Amazon Linux Security Advisory ALAS2-2026-3300 vom 2026-05-09
  https://alas.aws.amazon.com/AL2/ALAS2-2026-3300.html
• openSUSE Security Update OPENSUSE-SU-2026:10724-1 vom 2026-05-10
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/OCLXKR3SVJPA3J5GS6J5JU5HALZFEOHT/
• SUSE Security Update SUSE-SU-2026:21543-1 vom 2026-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025976.html
• SUSE Security Update SUSE-SU-2026:21552-1 vom 2026-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025969.html
• SUSE Security Update SUSE-SU-2026:21551-1 vom 2026-05-11
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/025970.html
• openSUSE Security Update OPENSUSE-SU-2026:10728-1 vom 2026-05-11
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/FBGPJAGCNO5HCFTOMNSHIAOXRUYUABBO/
• IBM Security Bulletin 7272669 vom 2026-05-12
  https://www.ibm.com/support/pages/node/7272669
• Red Hat Security Advisory RHSA-2026:16695 vom 2026-05-13
  https://access.redhat.com/errata/RHSA-2026:16695
• PDFreactor 12.6.0 Changelog vom 2026-05-13
  https://www.pdfreactor.com/product/changelog.htm
• IBM Security Bulletin 7278709 vom 2026-07-01
  https://www.ibm.com/support/pages/node/7278709
• IBM Security Bulletin 7278741 vom 2026-07-01
  https://www.ibm.com/support/pages/node/7278741
• Dell Security Advisory DSA-2026-269 vom 2026-07-03
  https://www.dell.com/support/kbdoc/de-de/000484594/dsa-2026-269-security-update-for-dell-networker-runtime-environment-multiple-third-party-component-vulnerabilities
• SUSE Security Update SUSE-SU-2026:1955-1 vom 2026-05-18
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026100.html
• IBM Security Bulletin 7273339 vom 2026-05-19
  https://www.ibm.com/support/pages/node/7273339
• IBM Security Bulletin 7273547 vom 2026-05-20
  https://www.ibm.com/support/pages/node/7273547
• SUSE Security Update SUSE-SU-2026:2036-1 vom 2026-05-21
  https://lists.suse.com/pipermail/sle-security-updates/2026-May/026206.html
• Rocky Linux Security Advisory RLSA-2026:9693 vom 2026-05-21
  https://errata.build.resf.org/RLSA-2026:9693
• IBM Security Bulletin 7273775 vom 2026-05-22
  https://www.ibm.com/support/pages/node/7273775
• IBM Security Bulletin 7273812 vom 2026-05-22
  https://www.ibm.com/support/pages/node/7273812
• IBM Security Bulletin 7273838 vom 2026-05-22
  https://www.ibm.com/support/pages/node/7273838
• Ubuntu Security Notice USN-8332-1 vom 2026-05-28
  https://ubuntu.com/security/notices/USN-8332-1
• Ubuntu Security Notice USN-8330-1 vom 2026-05-28
  https://ubuntu.com/security/notices/USN-8330-1
• Ubuntu Security Notice USN-8331-1 vom 2026-05-28
  https://ubuntu.com/security/notices/USN-8331-1