CVE-2025-30749
High · 8.1CVSS
8.1
EPSS
1.3%
Published
Jul 15, 2025
CISA due date
—
Cloudanix analysis
Monitor only
SSVC: Track
A flaw in Java's image processing could let remote attackers take full control of systems that run certain untrusted web applications, so organizations should update Java right away.
- Exploitation
- Remote Unauthenticated
- Attacker needs
- None
- Complexity
- High
- Impact
- Full Compromise
- Component
- Library
- Class
- RCE
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Remote code execution via the 2D component allowing unauthenticated network attackers to achieve full compromise of the Java runtime when processing untrusted code in sandboxed deployments.
Why it matters to the business
Potential complete takeover of affected Java environments running sandboxed client applications, increasing risk for organizations with legacy Java 8/11/17/21/24 deployments; low urgency as not observed in ransomware or KEV campaigns but EPSS rising 16% over 30 days since July 2025 publication.
How an attack unfolds
An attacker sends specially crafted data over multiple network protocols to trigger the 2D flaw in sandboxed Java Web Start or applet environments that load untrusted code, resulting in arbitrary code execution and full system compromise.
How to fix it
Upgrade Oracle Java SE, GraalVM for JDK, and GraalVM Enterprise Edition to fixed versions beyond 8u451, 11.0.27, 17.0.15, 21.0.7, and 24.0.1 respectively; for linux-lts (Alpaquita:stream) apply the update to 6.6.58-r0.
How to confirm the fix worked
Confirm all Java runtimes report versions newer than the listed affected releases, scan for remaining sandboxed applet/Web Start configurations, and retest network-exposed endpoints handling untrusted code.
Typical attack path
- Locate Java deployments running sandboxed untrusted code from the internet
- Craft and transmit malicious input via supported network protocols to the 2D component
- Exploit the difficult-to-trigger flaw to bypass sandbox restrictions
- Execute arbitrary code leading to full takeover of the Java process and host
How to detect it
Review network logs for unexpected connections to Java processes, examine sandboxed applet execution traces for anomalous 2D component activity, and search system logs for sudden privilege escalations or process anomalies post-July 2025.
What your security team should do
- Immediately inventory and patch all Oracle Java SE and GraalVM installations handling untrusted code
- Disable or isolate sandboxed Java Web Start and applet deployments where feasible
- Monitor EPSS trend and watch for emerging exploit maturity indicators
- Apply the linux-lts (Alpaquita:stream) 6.6.58-r0 update across affected streams
The record
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | java-1.8.0-openjdk | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-accessibility-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-demo-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-devel-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-headless-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-javadoc-zip | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-fastdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-1.8.0-openjdk-src-slowdebug | 0 | 1:1.8.0.462.b08-2.el8 |
| AlmaLinux:8 | java-17-openjdk | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-demo | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-demo-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-demo-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-devel | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-devel-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-devel-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-headless | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-headless-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-headless-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-javadoc | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-javadoc-zip | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-jmods-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-src | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-src-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-src-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs-fastdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-17-openjdk-static-libs-slowdebug | 0 | 1:17.0.16.0.8-2.el8 |
| AlmaLinux:8 | java-21-openjdk | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-demo | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-demo-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-demo-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-devel | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-devel-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-devel-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-headless | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-headless-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-headless-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-javadoc | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-javadoc-zip | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-jmods | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-jmods-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-jmods-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-src | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-src-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-src-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-static-libs | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-static-libs-fastdebug | 0 | 1:21.0.8.0.9-1.el8 |
| AlmaLinux:8 | java-21-openjdk-static-libs-slowdebug | 0 | 1:21.0.8.0.9-1.el8 |
| Chainguard | corretto-23 | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-dbg | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-default-jdk | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-default-jvm | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-demos | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-doc | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-jmods | 0 | 23.0.2.7.1-r7 |
| Chainguard | corretto-23-jre | 0 | 23.0.2.7.1-r7 |
| Chainguard | openjdk-11-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-11-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-17-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9 | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-dbg | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jdk | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-jvm | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-default-policy | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-doc | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jmods | 0 | 0.53.0-r0 |
| Chainguard | openjdk-21-openj9-jre | 0 | 0.53.0-r0 |
| Chainguard | openjdk-22 | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-dbg | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-default-jdk | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-default-jvm | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-demos | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-doc | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-jmods | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-jre | 0 | 22.0.2-r8 |
| Chainguard | openjdk-22-jre-base | 0 | 22.0.2-r8 |
| Chainguard | openjdk-23 | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-dbg | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-default-jdk | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-default-jvm | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-demos | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-doc | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-jmods | 0 | 23.0.2-r8 |
| Chainguard | openjdk-23-jre | 0 | 23.0.2-r8 |
| Chainguard | openjdk-8-openj9 | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-dbg | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jdk | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-default-jvm | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-doc | 0 | 0.53.0-r1 |
| Chainguard | openjdk-8-openj9-jre | 0 | 0.53.0-r1 |
| Chainguard | openjdk-crac-17 | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-dbg | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-default-jdk | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-default-jvm | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-demos | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-doc | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-jmods | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-jre | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-17-jre-base | 0 | 17.0.16.8-r0 |
| Chainguard | openjdk-crac-21 | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-dbg | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-default-jdk | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-default-jvm | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-demos | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-doc | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-jmods | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-jre | 0 | 21.0.8.9-r0 |
| Chainguard | openjdk-crac-21-jre-base | 0 | 21.0.8.9-r0 |
| Debian:11 | openjdk-11 | 0 | No fix |
| Debian:11 | openjdk-17 | 0 | No fix |
| Debian:12 | openjdk-17 | 0 | No fix |
| Debian:12 | openjdk-17 | 0 | 17.0.16+8-1~deb12u1 |
| Debian:13 | openjdk-21 | 0 | No fix |
| Debian:14 | openjdk-21 | 0 | 21.0.8+9-1 |
| Mageia:9 | java-1.8.0-openjdk | 0 | 1.8.0.462.b08-1.mga9 |
| Mageia:9 | java-11-openjdk | 0 | 11.0.28.0.6-1.mga9 |
| Mageia:9 | java-17-openjdk | 0 | 17.0.16.0.8-1.mga9 |
| Mageia:9 | java-latest-openjdk | 0 | 24.0.2.0.12-1.rolling.1.mga9 |
| SUSE:Enterprise Storage 7.1 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Enterprise Storage 7.1 | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Enterprise Storage 7.1 | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP6 | java-21-openjdk | 0 | 21.0.8.0-150600.3.15.1 |
| SUSE:Linux Enterprise Module for Basesystem 15 SP7 | java-21-openjdk | 0 | 21.0.8.0-150600.3.15.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP6 | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Module for Legacy 15 SP7 | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | java-1_8_0-openj9 | 0 | 1.8.0.462-150200.3.57.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | java-1_8_0-openj9 | 0 | 1.8.0.462-150200.3.57.1 |
| SUSE:Linux Enterprise Server 12 SP5-LTSS | java-11-openjdk | 0 | 11.0.28.0-3.90.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Server 15 SP3-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Server 15 SP4-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Server 15 SP5-LTSS | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 | java-11-openjdk | 0 | 11.0.28.0-3.90.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | java-1_8_0-ibm | 0 | 1.8.0_sr8.50-150000.3.104.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | java-1_8_0-openjdk | 0 | 1.8.0.462-150000.3.109.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | java-11-openjdk | 0 | 11.0.28.0-150000.3.129.2 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | java-17-openjdk | 0 | 17.0.16.0-150400.3.57.1 |
Related vulnerabilities
- CVE-2026-21945 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2026-21933 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2026-21925 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2025-65018 LIBPNG is vulnerable to a heap buffer overflow in `png_combine_row` triggered via… Also affects java-1.8.0-openjdk
- CVE-2025-64720 LIBPNG is vulnerable to a buffer overflow in `png_image_read_composite` via incorrect… Also affects java-1.8.0-openjdk
- CVE-2025-30761 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle… Also affects java-1.8.0-openjdk
- CVE-2025-50106 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk
- CVE-2025-30754 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise… Also affects java-1.8.0-openjdk