https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T10:05:37.393163+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02001 bdu:2022-02001 2026-10-03T10:05:37.590947+00:00 bdu:2022-02001 https://cve.radiocsirt.org/vuln/bit-java-2022-21349 BIT-java-2022-21349 2026-10-03T10:05:37.590995+00:00

Affected: Bitnami: java

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/certfr-2022-avi-051 certfr-2022-avi-051 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un dé… 2026-10-03T10:05:37.591037+00:00 certfr-2022-avi-051 https://cve.radiocsirt.org/vuln/cleanstart-2026-ft93880 CLEANSTART-2026-FT93880 — Security fix for CVE-2022-21349 applied in: openjdk8 8.322.06-r0 2026-10-03T10:05:37.591056+00:00

Affected: CleanStart: openjdk8

Security vulnerability affects the openjdk8 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/cnvd-2022-15474 cnvd-2022-15474 2026-10-03T10:05:37.591077+00:00 cnvd-2022-15474 https://cve.radiocsirt.org/vuln/euvd-2026-187904 EUVD-2026-187904 2026-10-03T10:05:37.591090+00:00 EUVD-2026-187904 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21349 fkie_cve-2022-21349 2026-10-03T10:05:37.591100+00:00

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/ghsa-mv36-g4g7-p396 GHSA-mv36-g4g7-p396 2026-10-03T10:05:37.591127+00:00

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/gsd-2022-21349 gsd-2022-21349 2026-10-03T10:05:37.591147+00:00 gsd-2022-21349 https://cve.radiocsirt.org/vuln/msrc_cve-2022-21349 msrc_CVE-2022-21349 — Vulnerability in the Oracle Java SE Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Suppor… 2026-10-03T10:05:37.591158+00:00 msrc_CVE-2022-21349 https://cve.radiocsirt.org/vuln/oesa-2022-1786 OESA-2022-1786 — openjdk-1.8.0 security update 2026-10-03T10:05:37.591178+00:00

Affected: openEuler:20.03-LTS-SP1: openjdk-1.8.0, openEuler:20.03-LTS-SP3: openjdk-1.8.0, openEuler:22.03-LTS: openjdk-1.8.0

The OpenJDK runtime environment 8. Security Fix(es): Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2022-21349) Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and 22.1.0. Easily exploitable vulnera…

 https://cve.radiocsirt.org/vuln/opensuse-su-2022:0873-1 openSUSE-SU-2022:0873-1 — Security update for java-1_8_0-openjdk 2026-10-03T10:05:37.591286+00:00

Security update for java-1_8_0-openjdk

 https://cve.radiocsirt.org/vuln/suse-su-2022:0871-1 SUSE-SU-2022:0871-1 — Security update for java-1_8_0-openjdk 2026-10-03T10:05:37.591314+00:00

Security update for java-1_8_0-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-21349 UBUNTU-CVE-2022-21349 2026-10-03T10:05:37.591339+00:00

Affected: Ubuntu:Pro:16.04:LTS: openjdk-8, Ubuntu:16.04:LTS: icedtea-web, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: icedtea-web, Ubuntu:20.04:LTS: openjdk-8, Ubuntu:20.04:LTS: icedtea-web, Ubuntu:22.04:LTS: icedtea-web, Ubuntu:22.04:LTS: openjdk-8, Ubuntu:24.04:LTS: icedtea-web, Ubuntu:25.10: icedtea-web and 1 more

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0100 WID-SEC-W-2022-0100 — Oracle Java SE und OpenJDK: Mehrere Schwachstellen 2026-10-03T10:05:37.591378+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und OpenJDK ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.