Oracle JavaFX vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

OJ

Product

Oracle JavaFX

by Oracle Corporation · last CVE Oct 20, 2026

4

CVEs

0

On KEV

5.4

Max CVSS

4

New 30D

Vulnerabilities4 In the news0 Timeline

Severity mix

Critical 0High 0Medium 2Low 2

Severity

All severities4 Critical0 High0 Medium2 Low2

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Oracle JavaFX to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-91385	5.4	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 21.0.12; 25.0.4; 27
CVE-2026-91418	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 21.0.12; 25.0.4; 27
CVE-2026-91477	3.1	0%	Oct 20	Vulnerability in the Oracle JavaFX product of Oracle Java SE (component: JavaFX) Affected: 25.0.4; 27
CVE-2026-91402	3.1	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 21.0.12; 25.0.4; 27