JD
Product
Jdk
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
804
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 77Medium 162Low 107
Watch

Add Jdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-2830
5.3
5%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)
Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0
CVE-2020-2781
5.3
5%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE)
Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0
CVE-2019-2821
5.3
2%
Jul 23
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE)
Affected: 11.0.3; 12.0.1
CVE-2019-2769
5.3
4%
Jul 23
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities)
Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.3; 12.0.1
CVE-2019-2762
5.3
4%
Jul 23
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities)
Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.3; 12.0.1
CVE-2019-13118
5.3
5%
Jul 1
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to…
Affected: 1.8.0
CVE-2019-7317
5.3
9%
Feb 4
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute
Affected: 11.0.3; 12.0.1
CVE-2018-3214
5.3
7%
Oct 17
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2018-2815
5.3
5%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 1.6.0; 1.7.0; 1.8.0; 10
CVE-2018-2799
5.3
15%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP)
Affected: 1.7.0; 1.8.0; 10
CVE-2018-2798
5.3
7%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT)
Affected: 1.6.0; 1.7.0; 1.8.0; 10
CVE-2018-2797
5.3
7%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX)
Affected: 1.6.0; 1.7.0; 1.8.0; 10
CVE-2018-2796
5.3
7%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency)
Affected: 1.7.0; 1.8.0; 10
CVE-2018-2795
5.3
7%
Apr 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
Affected: 1.6.0; 1.7.0; 1.8.0; 10
CVE-2018-2657
5.3
8%
Jan 18
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 1.6.0; 1.7.0
CVE-2018-2629
5.3
5%
Jan 18
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS)
Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1
CVE-2018-2603
5.3
7%
Jan 18
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1
CVE-2013-4578
5.3
2%
Dec 29
jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by…
Affected: 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +28 more
CVE-2017-10357
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10355
5.3
16%
Oct 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10350
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS)
Affected: 1.7.0; 1.8.0; 1.9.0
CVE-2017-10349
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10348
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10347
5.3
3%
Oct 19
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10281
5.3
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10109
5.3
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10108
5.3
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10053
5.3
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-3262
5.3
2%
Jan 27
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control)
Affected: 1.8
CVE-2016-5552
5.3
3%
Jan 27
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking)
Affected: 1.6; 1.7; 1.8; 1.8
CVE-2016-5547
5.3
4%
Jan 27
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.7; 1.8; 1.8
CVE-2016-3508
5.3
5%
Jul 21
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related…
Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0
CVE-2016-3500
5.3
5%
Jul 21
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related…
Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0
CVE-2016-3498
5.3
5%
Jul 21
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX
Affected: 1.7.0; 1.8.0
CVE-2023-22041
5.1
0%
Jul 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot)
Affected: 1.8.0; 11.0.19; 17.0.7; 20.0.1
CVE-2019-2745
5.1
0%
Jul 23
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security)
Affected: 1.7.0; 1.8.0; 11.0.3
CVE-2026-21925
4.8
0%
Jan 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI)
Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.29; 17.0.17; 21.0.9; +1 more
CVE-2025-30754
4.8
0%
Jul 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Affected: 1.8.0; 1.8.0; 11.0.27; 17.0.15; 21.0.7; 24.0.1
CVE-2025-30691
4.8
1%
Apr 15
Vulnerability in Oracle Java SE (component: Compiler)
Affected: 21.0.6; 24
CVE-2025-21502
4.8
1%
Jan 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 1.8.0; 11.0.25; 17.0.13; 21.0.5; 23.0.1
CVE-2024-21235
4.8
1%
Oct 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 1.8.0; 1.8.0; 11.0.24; 17.0.12; 21.0.4; 23
CVE-2024-21145
4.8
1%
Jul 16
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D)
Affected: 1.8.0; 1.8.0; 11.0.23; 17.0.11; 21.0.3; 22.0.1
CVE-2024-21140
4.8
1%
Jul 16
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 1.8.0; 1.8.0; 11.0.23; 17.0.11; 21.0.3; 22.0.1
CVE-2020-14556
4.8
3%
Jul 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 1.8.0; 11.0.7; 14.0.1
CVE-2020-2800
4.8
3%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server)
Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0
CVE-2020-2767
4.8
2%
Apr 15
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE)
Affected: 11.0.6; 14.0.0
CVE-2020-2655
4.8
4%
Jan 15
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE)
Affected: 11.0.5; 13.0.1
CVE-2020-2593
4.8
3%
Jan 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)
Affected: 1.7.0; 1.8.0; 11.0.5; 13.0.1
CVE-2019-2977
4.8
3%
Oct 16
Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot)
Affected: 11.0.4; 13.0.0
CVE-2019-2975
4.8
3%
Oct 16
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting)
Affected: 1.8.0; 11.0.4; 13.0.0
Page 5 of 10 · 500 total
1…456…10
The 500 most important CVEs for this product (exploited first, then by severity)