All vulnerabilities

Servers and applications

CVE-2026-91400

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are Oracle Java SE: 8u503, 8u503-perf, 11.0.32.1, 17.0.20.1, 21.0.12.1, 25.0.4.1, 27; Oracle GraalVM for JDK: 17.0.20.1 and 21.0.12.1; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability…

Severity
Low 3.1
Published
20 Oct 2026
Last changed
29 Oct 2026
Added to UpHeron
30 Oct 2026
Sources
CVE Program

Affected software

SoftwareAffected versions
JavaServers and applications · cna:oracle corporation|oracle graalvm for jdk
  • Every version up to 17.0.20.1
  • From 21 up to 21.0.12.1
JavaServers and applications · cna:oracle corporation|oracle java se
  • Every version up to 8u503
  • From 11 up to 11.0.32.1
  • From 17 up to 17.0.20.1
  • From 21 up to 21.0.12.1
  • From 25 up to 25.0.4.1
  • From 27 up to 27

References

  • CVE.org https://www.cve.org/CVERecord?id=CVE-2026-91400