https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:29:09.040531+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2026:55775 ALSA-2026:55775 — Moderate: java-1.8.0-openjdk security update 2026-10-02T19:29:09.105694+00:00

Affected: AlmaLinux:8: java-1.8.0-openjdk, AlmaLinux:8: java-1.8.0-openjdk-accessibility, AlmaLinux:8: java-1.8.0-openjdk-accessibility-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-accessibility-slowdebug, AlmaLinux:8: java-1.8.0-openjdk-demo, AlmaLinux:8: java-1.8.0-openjdk-demo-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-demo-slowdebug, AlmaLinux:8: java-1.8.0-openjdk-devel, AlmaLinux:8: java-1.8.0-openjdk-devel-fastdebug, AlmaLinux:8: java-1.8.0-openjdk-devel-slowdebug and 27 more

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* JDK: Improve Resource Resolving (CVE-2026-60589) * JDK: Enhance HTTP Connections (CVE-2026-61308) * JDK: Enhance TLS server (CVE-2026-70907)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bell-cve-2026-70907 BELL-CVE-2026-70907 2026-10-02T19:29:09.105812+00:00

Affected: Alpaquita:23: openjdk-nik-23-17, Alpaquita:23: openjdk-nik-23-21, Alpaquita:23: openjdk-nik-25-25, Alpaquita:23: openjdk11, Alpaquita:23: openjdk11-container-jre, Alpaquita:23: openjdk11-lite, Alpaquita:23: openjdk11-perf, Alpaquita:23: openjdk17, Alpaquita:23: openjdk17-container-jre, Alpaquita:23: openjdk17-crac and 109 more

 https://cve.radiocsirt.org/vuln/bit-java-2026-70907 BIT-java-2026-70907 2026-10-02T19:29:09.105947+00:00

Affected: Bitnami: java

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1048 certfr-2026-avi-1048 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Certaines d'entre elles permettent à un attaquant… 2026-10-02T19:29:09.105976+00:00 certfr-2026-avi-1048 https://cve.radiocsirt.org/vuln/euvd-2026-355359 EUVD-2026-355359 2026-10-02T19:29:09.105993+00:00 EUVD-2026-355359 https://cve.radiocsirt.org/vuln/fkie_cve-2026-70907 fkie_cve-2026-70907 2026-10-02T19:29:09.106004+00:00

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/ghsa-x2cm-pmmm-v6xc GHSA-x2cm-pmmm-v6xc 2026-10-02T19:29:09.106030+00:00

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/ncsc-2026-0314 NCSC-2026-0314 — Kwetsbaarheden verholpen in Oracle Java SE 2026-10-02T19:29:09.106049+00:00 NCSC-2026-0314 https://cve.radiocsirt.org/vuln/oesa-2026-3737 OESA-2026-3737 — openjdk-1.8.0 security update 2026-10-02T19:29:09.106069+00:00

Affected: openEuler:24.03-LTS-SP1: openjdk-1.8.0

Security Fix(es):

Buffer Overflow vulnerability in GifLib Project GifLib v.5.2.1 allows a local attacker to obtain sensitive information via the DumpSCreen2RGB function in gif2rgb.c(CVE-2023-48161)

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, a heap buffer over-read vulnerability exists in libpng's png_write_image_8bit function when processing 8-bit images through the simplified write API with convert_to_8bit enabled. The vulnerability affects 8-bit grayscale+alpha, RGB/RGBA, and images with incomplete row data. A conditional guard incorrectly allows 8-bit input to enter code expecting 16-bit input, causing reads up to 2 bytes beyond allocated buffer boundaries. This issue has been patched in version 1.6.51.(CVE-2025-64506)

LIBPNG is a reference library for use in applications that read, create, and manipulate PNG (Portable Network Graphics) raster image files. From version 1.6.0 to before 1.6.51, there is a heap buffer overflow vulnerability in the libpng simplified API function png_image_finish_read when processing 16-bit interlaced PNGs with 8-bit output format. Attacker-crafted interlaced PNG files cause heap writes beyond allocated buffer bounds. This issue has been patched in version 1.6.51.(CVE-2025-65018)

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (com…

 https://cve.radiocsirt.org/vuln/opensuse-su-2026:11594-1 openSUSE-SU-2026:11594-1 — java-11-openjdk-11.0.32.1-1.1 on GA media 2026-10-02T19:29:09.106157+00:00

java-11-openjdk-11.0.32.1-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2026:57175 RHSA-2026:57175 — Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update 2026-10-02T19:29:09.106175+00:00

OpenJDK: Improve Resource Resolving (2026-08 Security Update) OpenJDK: Enhance HTTP Connections (2026-08 Security Update) OpenJDK: Enhance TLS server (2026-08 Security Update)

 https://cve.radiocsirt.org/vuln/rlsa-2026:55775 RLSA-2026:55775 — Moderate: java-1.8.0-openjdk security update 2026-10-02T19:29:09.106192+00:00

Affected: Rocky Linux:8: java-1.8.0-openjdk

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit.

Security Fix(es):

* JDK: Improve Resource Resolving (CVE-2026-60589)

* JDK: Enhance HTTP Connections (CVE-2026-61308)

* JDK: Enhance TLS server (CVE-2026-70907)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/suse-su-2026:23591-1 SUSE-SU-2026:23591-1 — Security update for java-25-openjdk 2026-10-02T19:29:09.106215+00:00

Security update for java-25-openjdk

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-70907 UBUNTU-CVE-2026-70907 2026-10-02T19:29:09.106229+00:00

Affected: Ubuntu:Pro:16.04:LTS: openjdk-8, Ubuntu:16.04:LTS: openjdk-9, Ubuntu:Pro:18.04:LTS: openjdk-lts, Ubuntu:Pro:18.04:LTS: openjdk-17, Ubuntu:Pro:18.04:LTS: openjdk-8, Ubuntu:Pro:20.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: openjdk-13, Ubuntu:20.04:LTS: openjdk-16, Ubuntu:Pro:20.04:LTS: openjdk-17, Ubuntu:Pro:20.04:LTS: openjdk-21 and 19 more

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2897 WID-SEC-W-2026-2897 — Oracle Java SE: Mehrere Schwachstellen 2026-10-02T19:29:09.106281+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.