EO
Product
Eclipse OpenJ9
6
CVEs
0
On KEV
8.7
Max CVSS
4
New 30D
Severity mix
Critical 0High 4Medium 2Low 0
Watch
Add Eclipse OpenJ9 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-110938 | 8.7 | Oct 21 | JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing Affected: 0.8.0 before 0.63 |
| CVE-2026-111075 | 8.7 | Oct 21 | JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization Affected: 0.8.0 before 0.63 |
| CVE-2026-111074 | 8.7 | Oct 21 | JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity() Affected: 0.8.0 before 0.63 |
| CVE-2026-6918 | 7.5 | May 5 | In Eclipse Open9J versions 0.21 to 0.58, a pre-authentication remote attacker can crash JITServer by sending a 32-byte crafted TCP message Affected: 0.21 before 0.59 |
| CVE-2026-97400 | 6.8 | Oct 20 | jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader) Affected: 0.8.0 before 0.63 |
| CVE-2026-16440 | 5.7 | Aug 19 | In Eclipse OpenJ9 versions up to 0.60, a crafted .class file with deeply nested annotations causes a segmentation fault Affected: 0.8.0 before 0.60 |
Showing 6