Login Request a demo
GR
Product
Graalvm
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wild
196
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities196In the news0Timeline
Severity mix
Critical 6High 57Medium 86Low 47
Severity
All severities196Critical6High57Medium86Low47
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Graalvm to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-21835
5.3
2%
Jan 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Affected: 20.3.8; 21.3.4; 22.3.0
CVE-2023-21830
5.3
1%
Jan 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)
Affected: 20.3.8; 21.3.4; 22.3.0
CVE-2022-21628
5.3
3%
Oct 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server)
Affected: 20.3.7; 21.3.3; 22.2.0
CVE-2022-21597
5.3
1%
Oct 18
Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaScript)
Affected: 20.3.7; 21.3.3; 22.2.0
CVE-2022-21618
5.3
3%
Oct 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS)
Affected: 21.3.3; 22.2.0
CVE-2022-21626
5.3
2%
Oct 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)
Affected: 20.3.7; 21.3.3; 22.2.0
CVE-2022-21549
5.3
3%
Jul 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 21.3.2; 22.1.0
CVE-2022-21540
5.3
4%
Jul 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 20.3.6; 21.3.2; 22.1.0
CVE-2022-21496
5.3
3%
Apr 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI)
Affected: 20.3.5; 21.3.1; 22.0.0.2
CVE-2022-21434
5.3
2%
Apr 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 20.3.5; 21.3.1; 22.0.0.2
CVE-2022-21426
5.3
3%
Apr 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)
Affected: 20.3.5; 21.3.1; 22.0.0.2
CVE-2021-44532
5.3
10%
Feb 24
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format
Affected: 20.3.5; 21.3.1; 22.0.0.2
CVE-2021-44533
5.3
9%
Feb 24
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly
Affected: 20.3.5; 21.3.1; 22.0.0.2
CVE-2022-21366
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)
Affected: 20.3.4; 21.3.0
CVE-2022-21365
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)
Affected: 20.3.4; 21.3.0
CVE-2022-21360
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)
Affected: 20.3.4; 21.3.0
CVE-2022-21349
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D)
Affected: 20.3.4; 21.3.0
CVE-2022-21341
5.3
4%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)
Affected: 20.3.4; 21.3.0
CVE-2022-21340
5.3
8%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 20.3.4; 21.3.0
CVE-2022-21305
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 20.3.4; 21.3.0
CVE-2022-21299
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)
Affected: 20.3.4; 21.3.0
CVE-2022-21296
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)
Affected: 20.3.4; 21.3.0
CVE-2022-21294
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 20.3.4; 21.3.0
CVE-2022-21293
5.3
8%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 20.3.4; 21.3.0
CVE-2022-21291
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 20.3.4; 21.3.0
CVE-2022-21283
5.3
4%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 20.3.4; 21.3.0
CVE-2022-21282
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)
Affected: 20.3.4; 21.3.0
CVE-2022-21277
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)
Affected: 20.3.4; 21.3.0
CVE-2022-21271
5.3
3%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 20.3.4; 21.3.0
CVE-2021-35586
5.3
7%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO)
Affected: 20.3.3; 21.2.0
CVE-2021-35578
5.3
7%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Affected: 20.3.3; 21.2.0
CVE-2021-35565
5.3
7%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Affected: 20.3.3; 21.2.0
CVE-2021-35564
5.3
6%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool)
Affected: 20.3.3; 21.2.0
CVE-2021-35561
5.3
7%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility)
Affected: 20.3.3; 21.2.0
CVE-2021-35559
5.3
16%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing)
Affected: 20.3.3; 21.2.0
CVE-2021-35556
5.3
8%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing)
Affected: 20.3.3; 21.2.0
CVE-2021-22939
5.3
15%
Aug 16
If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an…
Affected: 20.3.3; 21.2.0
CVE-2021-2163
5.3
4%
Apr 22
Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 19.3.5; 20.3.1.2; 21.0.0.2
CVE-2020-14803
5.3
3%
Oct 21
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries)
Affected: 19.3.3; 19.3.4; 20.2.0; 20.3.0
CVE-2023-22041
5.1
0%
Jul 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot)
Affected: 20.3.10; 21.3.6; 22.3.2
CVE-2026-21925
4.8
0%
Jan 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI)
Affected: 21.3.16
CVE-2025-30754
4.8
0%
Jul 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Affected: 21.3.14
CVE-2025-21502
4.8
1%
Jan 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 20.3.16; 21.3.12
CVE-2024-21235
4.8
1%
Oct 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 20.3.15; 21.3.11
CVE-2024-21145
4.8
1%
Jul 16
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D)
Affected: 20.3.14; 21.3.10; 22.0.1
CVE-2024-21140
4.8
1%
Jul 16
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 20.3.14; 21.3.10
CVE-2024-20945
4.7
0%
Feb 17
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)
Affected: 20.3.12; 21.3.8; 22.3.4
CVE-2021-2369
4.3
3%
Jul 21
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library)
Affected: 20.3.2; 21.1.0
CVE-2020-2581
4.0
0%
Jan 15
Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter)
Affected: 19.3.0.2
CVE-2026-47059
3.7
0%
Jul 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D)
Affected: 21.3.18
Page 3 of 4 · 196 total
1234