Oracle GraalVM for JDK vulnerabilities | LiveThreat CVE Feed

Product

Oracle GraalVM for JDK

by Oracle Corporation · last CVE Oct 24, 2026

CVEs

On KEV

9.1

Max CVSS

New 30D

Vulnerabilities64 In the news0 Timeline

Severity mix

Critical 2High 12Medium 33Low 17

Severity

All severities64 Critical2 High12 Medium33 Low17

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Oracle GraalVM for JDK to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-114820 New	9.1	0%	Oct 24	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.21.0.2; 21.0.13.0.2
CVE-2026-91403	9.1	0%	Oct 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.21; 21.0.13
CVE-2025-50059	8.6	1%	Jul 15	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.15; 21.0.7; 24.0.1
CVE-2025-50106	8.1	1%	Jul 15	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.15; 21.0.7; 24.0.1
CVE-2025-30749	8.1	1%	Jul 15	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.15; 21.0.7; 24.0.1
CVE-2026-62574	7.8	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install) Affected: 17.0.20; 21.0.12
CVE-2026-47063	7.5	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 17.0.19; 21.0.11
CVE-2026-34282	7.5	1%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.18; 21.0.10
CVE-2026-22016	7.5	1%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 17.0.18; 21.0.10
CVE-2026-21945	7.5	1%	Jan 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.17; 21.0.9
CVE-2025-53066	7.5	1%	Oct 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 17.0.16; 21.0.8
CVE-2026-21932	7.4	1%	Jan 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT, JavaFX) Affected: 17.0.17; 21.0.9
CVE-2025-21587	7.4	1%	Apr 15	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.14; 21.0.6; 24
CVE-2026-91415	7.0	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91398	6.8	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91411	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91396	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91395	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91382	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-87294	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83395	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-101516	6.5	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-60147	6.5	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.19; 21.0.11
CVE-2026-21933	6.1	0%	Jan 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.17; 21.0.9
CVE-2026-91462	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91394	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-87290	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83387	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDBC) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83374	5.9	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.20.1; 21.0.12.1
CVE-2025-53057	5.9	1%	Oct 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.16; 21.0.8
CVE-2025-30698	5.6	1%	Apr 15	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.14; 21.0.6; 24
CVE-2026-91464	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91463	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91453	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Lightweight HTTP Server) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91452	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91418	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83400	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-83380	5.3	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAAS) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-47021	5.3	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 17.0.19; 21.0.11
CVE-2026-46917	5.3	0%	Jul 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.19; 21.0.11
CVE-2026-22021	5.3	0%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.18; 21.0.10
CVE-2026-22013	5.3	0%	Apr 21	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS) Affected: 17.0.18; 21.0.10
CVE-2026-91374	4.8	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serviceability) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-21925	4.8	0%	Jan 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI) Affected: 17.0.17; 21.0.9
CVE-2025-30754	4.8	0%	Jul 15	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.15; 21.0.7; 24.0.1
CVE-2026-91379	4.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JDK tools) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91380	4.0	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91461	3.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-91334	3.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 17.0.20.1; 21.0.12.1
CVE-2026-87367	3.7	0%	Oct 20	Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 17.0.20.1; 21.0.12.1