Oracle Critical Patch Update — July 2025
Tuesday, 15 July 2025
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 1
- Critical 9.0
Public exploit code 2
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 8.2
-
High 8.1
CVE-2025-30749 Public exploit Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions th…EPSS 1.3%
All vulnerabilities 77
Critical1 ShowHide
- Critical 9.0
High15 ShowHide
- High 8.8
- High 8.6
- High 8.2
- High 8.2
- High 8.2
-
High 8.1
CVE-2025-30749 Public exploit Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions th…EPSS 1.3%
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 8.1
- High 7.7
- High 7.5
- High 7.3
Medium52 ShowHide
- Medium 6.7
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.4
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.0
- Medium 6.0
- Medium 6.0
-
Medium 5.9
CVE-2025-30761 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affected a…EPSS 5.2%
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.8
- Medium 4.8
- Medium 4.4
- Medium 4.4
- Medium 4.3
- Medium 4.0
Low9 ShowHide
- Low 3.7
- Low 3.7
- Low 3.1
- Low 2.7
- Low 2.7
- Low 2.7
- Low 2.4
- Low 2.3
- Low 2.2