Graalvm vulnerabilities | LiveThreat CVE Feed

Product

Graalvm

by Oracle · last CVE Jul 21, 2026

On CISA KEVExploited in the wild

196

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities196 In the news0 Timeline

Severity mix

Critical 6High 57Medium 86Low 47

Severity

All severities196 Critical6 High57 Medium86 Low47

Exploitation

On CISA KEV1 Exploited in the wild1

Watch

Add Graalvm to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2022-21366	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 20.3.4; 21.3.0
CVE-2022-21365	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 20.3.4; 21.3.0
CVE-2022-21360	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 20.3.4; 21.3.0
CVE-2022-21349	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 20.3.4; 21.3.0
CVE-2022-21341	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: 20.3.4; 21.3.0
CVE-2022-21340	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 20.3.4; 21.3.0
CVE-2022-21305	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 20.3.4; 21.3.0
CVE-2022-21299	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 20.3.4; 21.3.0
CVE-2022-21296	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 20.3.4; 21.3.0
CVE-2022-21294	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 20.3.4; 21.3.0
CVE-2022-21293	5.3	8%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 20.3.4; 21.3.0
CVE-2022-21291	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 20.3.4; 21.3.0
CVE-2022-21283	5.3	4%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 20.3.4; 21.3.0
CVE-2022-21282	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 20.3.4; 21.3.0
CVE-2022-21277	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 20.3.4; 21.3.0
CVE-2022-21271	5.3	3%	Jan 19	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 20.3.4; 21.3.0
CVE-2021-35586	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 20.3.3; 21.2.0
CVE-2021-35578	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 20.3.3; 21.2.0
CVE-2021-35565	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 20.3.3; 21.2.0
CVE-2021-35564	5.3	6%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool) Affected: 20.3.3; 21.2.0
CVE-2021-35561	5.3	7%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: 20.3.3; 21.2.0
CVE-2021-35559	5.3	16%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: 20.3.3; 21.2.0
CVE-2021-35556	5.3	8%	Oct 20	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: 20.3.3; 21.2.0
CVE-2021-22939	5.3	15%	Aug 16	If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an… Affected: 20.3.3; 21.2.0
CVE-2021-2163	5.3	4%	Apr 22	Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 19.3.5; 20.3.1.2; 21.0.0.2
CVE-2020-14803	5.3	3%	Oct 21	Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: 19.3.3; 19.3.4; 20.2.0; 20.3.0
CVE-2023-22041	5.1	0%	Jul 18	Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot) Affected: 20.3.10; 21.3.6; 22.3.2
CVE-2026-21925	4.8	0%	Jan 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI) Affected: 21.3.16
CVE-2025-30754	4.8	0%	Jul 15	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 21.3.14
CVE-2025-21502	4.8	1%	Jan 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 20.3.16; 21.3.12
CVE-2024-21235	4.8	1%	Oct 15	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 20.3.15; 21.3.11
CVE-2024-21145	4.8	1%	Jul 16	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 20.3.14; 21.3.10; 22.0.1
CVE-2024-21140	4.8	1%	Jul 16	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 20.3.14; 21.3.10
CVE-2024-20945	4.7	0%	Feb 17	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 20.3.12; 21.3.8; 22.3.4
CVE-2021-2369	4.3	3%	Jul 21	Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library) Affected: 20.3.2; 21.1.0
CVE-2020-2581	4.0	0%	Jan 15	Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter) Affected: 19.3.0.2