CVE-2025-21587
NoneCVSS
—
EPSS
0.8%
Published
Apr 15, 2025
CISA due date
—
Cloudanix analysis
Schedule a fix
SSVC: Track
A problem in Java's security handling could let remote attackers change or steal important data without needing login credentials.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- High
- Impact
- Data Tampering
- Component
- Library
- Class
- Cryptographic Weakness
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Flaw in JSSE component allows unauthenticated network attackers to achieve unauthorized creation, deletion, modification, or access to critical data via crafted interactions with cryptographic APIs.
Why it matters to the business
Attackers could alter or steal sensitive information processed by affected Java deployments, leading to data integrity issues, compliance violations, and potential loss of customer trust, though exploitation requires specific conditions.
How an attack unfolds
An attacker with network access crafts malicious requests or supplies data to JSSE APIs through web services or untrusted code loaded in sandboxed environments, bypassing cryptographic protections to read or tamper with data streams.
How to fix it
Upgrade Oracle Java SE to versions beyond 8u441, 11.0.26, 17.0.14, 21.0.6, or 24; upgrade GraalVM for JDK and Enterprise Edition to patched releases after 17.0.14, 21.0.6, 24, 20.3.17, or 21.3.13. Apply vendor patches promptly given the data confidentiality and integrity risks.
How to confirm the fix worked
Verify Java runtime versions against fixed releases, review application configurations for JSSE usage, and test that network endpoints no longer permit the previously vulnerable API behaviors.
Typical attack path
- Identify reachable Java application exposing JSSE APIs over network protocols
- Craft and send specially formed network traffic or API inputs to trigger the weakness
- Exploit the flaw to gain unauthorized read or write access to protected data
- Exfiltrate or modify critical information without triggering authentication checks
How to detect it
Review application and system logs for anomalous JSSE-related API calls or unexpected data modifications originating from network sources; examine traffic to services supplying data to cryptographic components.
What your security team should do
- Prioritize patching all exposed Java SE and GraalVM installations to the latest fixed versions
- Monitor for any unusual data access patterns in applications using JSSE
- Restrict network exposure of services relying on the affected component where possible
The record
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK:17.0.14, 21.0.6, 24; Oracle GraalVM Enterprise Edition:20.3.17 and 21.3.13. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:10 | java-21-openjdk | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-demo | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-demo-fastdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-demo-slowdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-devel | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-devel-fastdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-devel-slowdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-fastdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-headless | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-headless-fastdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-headless-slowdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-javadoc | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-javadoc-zip | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-jmods | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-jmods-fastdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-jmods-slowdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-slowdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-src | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-src-fastdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-src-slowdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-static-libs | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-static-libs-fastdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:10 | java-21-openjdk-static-libs-slowdebug | 0 | 1:21.0.7.0.6-1.el10.alma.1 |
| AlmaLinux:8 | java-1.8.0-openjdk | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-fastdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-slowdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-fastdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-slowdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-fastdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-slowdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-fastdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-fastdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-slowdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-slowdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-fastdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-slowdebug | 0 | 1:1.8.0.452.b09-2.el8 |
| AlmaLinux:8 | java-17-openjdk | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-demo | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-devel | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-headless | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-src | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 0 | 1:17.0.15.0.6-2.el8 |
| AlmaLinux:8 | java-21-openjdk | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-demo | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-demo-fastdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-demo-slowdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-devel | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-devel-fastdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-devel-slowdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-fastdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-headless | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-headless-fastdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-headless-slowdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-javadoc | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-javadoc-zip | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-jmods | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-jmods-fastdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-jmods-slowdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-slowdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-src | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-src-fastdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-src-slowdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-static-libs | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-static-libs-fastdebug | 0 | 1:21.0.7.0.6-1.el8 |
| AlmaLinux:8 | java-21-openjdk-static-libs-slowdebug | 0 | 1:21.0.7.0.6-1.el8 |
| Chainguard | cof-corretto-17 | 0 | 17.0.15.6.1-r0 |
| Chainguard | cof-corretto-17-dbg | 0 | 17.0.15.6.1-r0 |
| Chainguard | cof-corretto-17-default-jdk | 0 | 17.0.15.6.1-r0 |
| Chainguard | cof-corretto-17-default-jvm | 0 | 17.0.15.6.1-r0 |
| Chainguard | cof-corretto-17-default-policy | 0 | 17.0.15.6.1-r0 |
| Chainguard | cof-corretto-17-demos | 0 | 17.0.15.6.1-r0 |
| Chainguard | cof-corretto-17-doc | 0 | 17.0.15.6.1-r0 |
| Chainguard | cof-corretto-17-jmods | 0 | 17.0.15.6.1-r0 |
| Chainguard | cof-corretto-17-jre | 0 | 17.0.15.6.1-r0 |
| Chainguard | cof-corretto-21 | 0 | 21.0.7.6.1-r0 |
| Chainguard | cof-corretto-21-dbg | 0 | 21.0.7.6.1-r0 |
| Chainguard | cof-corretto-21-default-jdk | 0 | 21.0.7.6.1-r0 |
| Chainguard | cof-corretto-21-default-jvm | 0 | 21.0.7.6.1-r0 |
| Chainguard | cof-corretto-21-default-policy | 0 | 21.0.7.6.1-r0 |
| Chainguard | cof-corretto-21-demos | 0 | 21.0.7.6.1-r0 |
| Chainguard | cof-corretto-21-doc | 0 | 21.0.7.6.1-r0 |
| Chainguard | cof-corretto-21-jmods | 0 | 21.0.7.6.1-r0 |
| Chainguard | cof-corretto-21-jre | 0 | 21.0.7.6.1-r0 |
| Chainguard | cof-corretto-24 | 0 | 24.0.1.9.1-r0 |
| Chainguard | cof-corretto-24-dbg | 0 | 24.0.1.9.1-r0 |
| Chainguard | cof-corretto-24-default-jdk | 0 | 24.0.1.9.1-r0 |
| Chainguard | cof-corretto-24-default-jvm | 0 | 24.0.1.9.1-r0 |
| Chainguard | cof-corretto-24-default-policy | 0 | 24.0.1.9.1-r0 |
| Chainguard | cof-corretto-24-demos | 0 | 24.0.1.9.1-r0 |
| Chainguard | cof-corretto-24-jmods | 0 | 24.0.1.9.1-r0 |
| Chainguard | cof-corretto-24-jre | 0 | 24.0.1.9.1-r0 |
| Chainguard | corretto-17 | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-17-dbg | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-17-default-jdk | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-17-default-jvm | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-17-default-policy | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-17-demos | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-17-doc | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-17-jmods | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-17-jre | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-17-jre-base | 0 | 17.0.15.6.1-r0 |
| Chainguard | corretto-21 | 0 | 21.0.7.6.1-r0 |
| Chainguard | corretto-21-dbg | 0 | 21.0.7.6.1-r0 |
| Chainguard | corretto-21-default-jdk | 0 | 21.0.7.6.1-r0 |
| Chainguard | corretto-21-default-jvm | 0 | 21.0.7.6.1-r0 |
| Chainguard | corretto-21-default-policy | 0 | 21.0.7.6.1-r0 |
| Chainguard | corretto-21-demos | 0 | 21.0.7.6.1-r0 |
| Chainguard | corretto-21-doc | 0 | 21.0.7.6.1-r0 |
| Chainguard | corretto-21-jmods | 0 | 21.0.7.6.1-r0 |
| Chainguard | corretto-21-jre | 0 | 21.0.7.6.1-r0 |
| Chainguard | corretto-23 | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-dbg | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-default-jdk | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-default-jvm | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-demos | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-doc | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-jmods | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-jre | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-24 | 0 | 24.0.1.9.1-r0 |
| Chainguard | corretto-24-dbg | 0 | 24.0.1.9.1-r0 |
| Chainguard | corretto-24-default-jdk | 0 | 24.0.1.9.1-r0 |
| Chainguard | corretto-24-default-jvm | 0 | 24.0.1.9.1-r0 |
| Chainguard | corretto-24-demos | 0 | 24.0.1.9.1-r0 |
| Chainguard | corretto-24-jmods | 0 | 24.0.1.9.1-r0 |
| Chainguard | corretto-24-jre | 0 | 24.0.1.9.1-r0 |
| Chainguard | openjdk-11-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-22 | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-dbg | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-default-jdk | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-default-jvm | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-demos | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-doc | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-jmods | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-jre | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-jre-base | 0 | 22.0.2-r8 |
| Chainguard | openjdk-23 | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-dbg | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-default-jdk | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-default-jvm | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-demos | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-doc | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-jmods | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-jre | 0 | 23.0.2-r8 |
| Chainguard | openjdk-8-openj9 | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jdk | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jvm | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-doc | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-jre | 0 | 0.53.0-r1 |
| Chainguard | openjdk-crac-17 | 0 | 17.0.15.6-r0 |
| Chainguard | openjdk-crac-17-dbg | 0 | 17.0.15.6-r0 |
| Chainguard | openjdk-crac-17-default-jdk | 0 | 17.0.15.6-r0 |
| Chainguard | openjdk-crac-17-default-jvm | 0 | 17.0.15.6-r0 |
Related vulnerabilities
- CVE-2026-21945 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-21-openjdk
- CVE-2026-21933 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-21-openjdk
- CVE-2026-21925 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-21-openjdk
- CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via… Also affects java-21-openjdk
- CVE-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect… Also affects java-21-openjdk
- CVE-2025-30698 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-21-openjdk
- CVE-2025-30691 Vulnerability in Oracle Java SE (component: Compiler). Also affects java-21-openjdk
- CVE-2025-30761 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle… Also affects java-1.8.0-openjdk