Oracle GraalVM for JDK vulnerabilities | LiveThreat CVE Feed

Product

Oracle GraalVM for JDK

by Oracle Corporation · last CVE Oct 24, 2026

CVEs

On KEV

9.1

Max CVSS

New 30D

Vulnerabilities48 In the news0 Timeline

Severity mix

Critical 2High 5Medium 28Low 13

Severity

All severities48 Critical2 High5 Medium28 Low13

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Oracle GraalVM for JDK to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-114820 New	9.1	0%	Oct 24	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.21.0.2; 21.0.13.0.2
CVE-2026-91403 New	9.1	0%	Oct 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.21; 21.0.13
CVE-2026-62574	7.8	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install) Affected: 17.0.20; 21.0.12
CVE-2026-47063	7.5	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 17.0.19; 21.0.11
CVE-2026-34282	7.5	1%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.18; 21.0.10
CVE-2026-22016	7.5	1%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 17.0.18; 21.0.10
CVE-2026-91415	7.0	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91398	6.8	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91411	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91396	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91395	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91382	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-87294	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83395	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-101516	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-60147	6.5	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.19; 21.0.11
CVE-2026-91462	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91394	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-87290	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83387	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83374	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91464	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91463	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91453	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91452	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91418	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83400	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83380	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-47021	5.3	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.19; 21.0.11
CVE-2026-46917	5.3	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.19; 21.0.11
CVE-2026-22021	5.3	0%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.18; 21.0.10
CVE-2026-22013	5.3	0%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.18; 21.0.10
CVE-2026-91374	4.8	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91379	4.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91380	4.0	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91461	3.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91334	3.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-87367	3.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-87292	3.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83376	3.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-47059	3.7	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.19; 21.0.11
CVE-2026-47010	3.7	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 17.0.19; 21.0.11
CVE-2026-22018	3.7	0%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 17.0.18; 21.0.10
CVE-2026-91397	3.6	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91400	3.1	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-34268	2.9	0%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.18; 21.0.10
CVE-2026-22007	2.9	0%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.18; 21.0.10
CVE-2026-91335	2.6	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT) Affected: 17.0.20.1; 21.0.12.1