CVE-2026-91381
java-11-amazon-corretto: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D)
CVE-2026-91381 is fixed in 40 products on 1 platform, first by ALAS2023-2026-3315, released November 7, 2026. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
n/a
important
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0023
14th percentile
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u503 and 8u503-perf; Oracle GraalVM Enterprise Edition: 21.3.19.1.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for secur…
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| java-1.8.0-amazon-corretto · amzn 2023 | 1:1.8.0_512.b08-1.amzn2023 | ALAS2023-2026-3315 | Nov 7, 2026 |
| java-1.8.0-amazon-corretto-debugsymbols · amzn 2023 | 1:1.8.0_512.b08-1.amzn2023 | ALAS2023-2026-3315 | Nov 7, 2026 |
| java-1.8.0-amazon-corretto-devel · amzn 2023 | 1:1.8.0_512.b08-1.amzn2023 | ALAS2023-2026-3315 | Nov 7, 2026 |
| java-11-amazon-corretto · amzn 2023 | 1:11.0.33.0.9-1.amzn2023 | ALAS2023-2026-3317 | Nov 7, 2026 |
| java-11-amazon-corretto-debugsymbols · amzn 2023 | 1:11.0.33.0.9-1.amzn2023 | ALAS2023-2026-3317 | Nov 7, 2026 |
| java-11-amazon-corretto-devel · amzn 2023 | 1:11.0.33.0.9-1.amzn2023 | ALAS2023-2026-3317 | Nov 7, 2026 |
| java-11-amazon-corretto-headless · amzn 2023 | 1:11.0.33.0.9-1.amzn2023 | ALAS2023-2026-3317 | Nov 7, 2026 |
| java-11-amazon-corretto-javadoc · amzn 2023 | 1:11.0.33.0.9-1.amzn2023 | ALAS2023-2026-3317 | Nov 7, 2026 |
| java-11-amazon-corretto-jmods · amzn 2023 | 1:11.0.33.0.9-1.amzn2023 | ALAS2023-2026-3317 | Nov 7, 2026 |
| java-17-amazon-corretto · amzn 2023 | 1:17.0.21.0.10-1.amzn2023.1 | ALAS2023-2026-3318 | Nov 7, 2026 |
| java-17-amazon-corretto-debugsymbols · amzn 2023 | 1:17.0.21.0.10-1.amzn2023.1 | ALAS2023-2026-3318 | Nov 7, 2026 |
| java-17-amazon-corretto-devel · amzn 2023 | 1:17.0.21.0.10-1.amzn2023.1 | ALAS2023-2026-3318 | Nov 7, 2026 |
| java-17-amazon-corretto-headless · amzn 2023 | 1:17.0.21.0.10-1.amzn2023.1 | ALAS2023-2026-3318 | Nov 7, 2026 |
| java-17-amazon-corretto-javadoc · amzn 2023 | 1:17.0.21.0.10-1.amzn2023.1 | ALAS2023-2026-3318 | Nov 7, 2026 |
| java-17-amazon-corretto-jmods · amzn 2023 | 1:17.0.21.0.10-1.amzn2023.1 | ALAS2023-2026-3318 | Nov 7, 2026 |
| java-21-amazon-corretto · amzn 2023 | 1:21.0.13.0.10-1.amzn2023.1 | ALAS2023-2026-3319 | Nov 7, 2026 |
| java-21-amazon-corretto-debugsymbols · amzn 2023 | 1:21.0.13.0.10-1.amzn2023.1 | ALAS2023-2026-3319 | Nov 7, 2026 |
| java-21-amazon-corretto-devel · amzn 2023 | 1:21.0.13.0.10-1.amzn2023.1 | ALAS2023-2026-3319 | Nov 7, 2026 |
| java-21-amazon-corretto-headless · amzn 2023 | 1:21.0.13.0.10-1.amzn2023.1 | ALAS2023-2026-3319 | Nov 7, 2026 |
| java-21-amazon-corretto-javadoc · amzn 2023 | 1:21.0.13.0.10-1.amzn2023.1 | ALAS2023-2026-3319 | Nov 7, 2026 |
| java-21-amazon-corretto-jmods · amzn 2023 | 1:21.0.13.0.10-1.amzn2023.1 | ALAS2023-2026-3319 | Nov 7, 2026 |
| java-25-amazon-corretto · amzn 2023 | 1:25.0.5.0.9-1.amzn2023.1 | ALAS2023-2026-3320 | Nov 7, 2026 |
| java-25-amazon-corretto-debugsymbols · amzn 2023 | 1:25.0.5.0.9-1.amzn2023.1 | ALAS2023-2026-3320 | Nov 7, 2026 |
| java-25-amazon-corretto-devel · amzn 2023 | 1:25.0.5.0.9-1.amzn2023.1 | ALAS2023-2026-3320 | Nov 7, 2026 |
| java-25-amazon-corretto-headless · amzn 2023 | 1:25.0.5.0.9-1.amzn2023.1 | ALAS2023-2026-3320 | Nov 7, 2026 |
| java-25-amazon-corretto-javadoc · amzn 2023 | 1:25.0.5.0.9-1.amzn2023.1 | ALAS2023-2026-3320 | Nov 7, 2026 |
| java-25-amazon-corretto-jmods · amzn 2023 | 1:25.0.5.0.9-1.amzn2023.1 | ALAS2023-2026-3320 | Nov 7, 2026 |
| java-27-amazon-corretto · amzn 2023 | 1:27.0.1.0.10-1.amzn2023.1 | ALAS2023-2026-3316 | Nov 7, 2026 |
| java-27-amazon-corretto-debugsymbols · amzn 2023 | 1:27.0.1.0.10-1.amzn2023.1 | ALAS2023-2026-3316 | Nov 7, 2026 |
| java-27-amazon-corretto-devel · amzn 2023 | 1:27.0.1.0.10-1.amzn2023.1 | ALAS2023-2026-3316 | Nov 7, 2026 |
| java-27-amazon-corretto-headless · amzn 2023 | 1:27.0.1.0.10-1.amzn2023.1 | ALAS2023-2026-3316 | Nov 7, 2026 |
| java-27-amazon-corretto-javadoc · amzn 2023 | 1:27.0.1.0.10-1.amzn2023.1 | ALAS2023-2026-3316 | Nov 7, 2026 |
| java-27-amazon-corretto-jmods · amzn 2023 | 1:27.0.1.0.10-1.amzn2023.1 | ALAS2023-2026-3316 | Nov 7, 2026 |
| openjdk-8-demo · Ubuntu 18.04.6 LTS (bionic) | 8u512-b09~us1-0ubuntu1~18.04.1 | openjdk-8-demo 8u512-b09~us1-0ubuntu1~18.04.1 | Nov 11, 2026 |
| openjdk-8-demo · Ubuntu 20.04 LTS (focal) | 8u512-b09~us1-0ubuntu1~20.04.1 | openjdk-8-demo 8u512-b09~us1-0ubuntu1~20.04.1 | Nov 11, 2026 |
| openjdk-8-demo · Ubuntu 22.04.1 LTS (jammy) | 8u512-b09~us1-0ubuntu1~22.04.1 | openjdk-8-demo 8u512-b09~us1-0ubuntu1~22.04.1 | Nov 11, 2026 |
| openjdk-8-demo · Ubuntu 24.04.5 LTS (noble) | 8u512-b09~us1-0ubuntu1~24.04.1 | openjdk-8-demo 8u512-b09~us1-0ubuntu1~24.04.1 | Nov 11, 2026 |
| openjdk-8-demo · Ubuntu 26.04.1 LTS (resolute) | 8u512-b09~us1-0ubuntu1~26.04.1 | openjdk-8-demo 8u512-b09~us1-0ubuntu1~26.04.1 | Nov 11, 2026 |
| openjdk-8-jdk · Ubuntu 18.04.6 LTS (bionic) | 8u512-b09~us1-0ubuntu1~18.04.1 | openjdk-8-jdk 8u512-b09~us1-0ubuntu1~18.04.1 | Nov 11, 2026 |
| openjdk-8-jdk · Ubuntu 20.04 LTS (focal) | 8u512-b09~us1-0ubuntu1~20.04.1 | openjdk-8-jdk 8u512-b09~us1-0ubuntu1~20.04.1 | Nov 11, 2026 |
| openjdk-8-jdk · Ubuntu 22.04.1 LTS (jammy) | 8u512-b09~us1-0ubuntu1~22.04.1 | openjdk-8-jdk 8u512-b09~us1-0ubuntu1~22.04.1 | Nov 11, 2026 |
| openjdk-8-jdk · Ubuntu 24.04.5 LTS (noble) | 8u512-b09~us1-0ubuntu1~24.04.1 | openjdk-8-jdk 8u512-b09~us1-0ubuntu1~24.04.1 | Nov 11, 2026 |
| openjdk-8-jdk · Ubuntu 26.04.1 LTS (resolute) | 8u512-b09~us1-0ubuntu1~26.04.1 | openjdk-8-jdk 8u512-b09~us1-0ubuntu1~26.04.1 | Nov 11, 2026 |
| openjdk-8-jdk-headless · Ubuntu 18.04.6 LTS (bionic) | 8u512-b09~us1-0ubuntu1~18.04.1 | openjdk-8-jdk-headless 8u512-b09~us1-0ubuntu1~18.04.1 | Nov 11, 2026 |
| openjdk-8-jdk-headless · Ubuntu 20.04 LTS (focal) | 8u512-b09~us1-0ubuntu1~20.04.1 | openjdk-8-jdk-headless 8u512-b09~us1-0ubuntu1~20.04.1 | Nov 11, 2026 |
| openjdk-8-jdk-headless · Ubuntu 22.04.1 LTS (jammy) | 8u512-b09~us1-0ubuntu1~22.04.1 | openjdk-8-jdk-headless 8u512-b09~us1-0ubuntu1~22.04.1 | Nov 11, 2026 |
| openjdk-8-jdk-headless · Ubuntu 24.04.5 LTS (noble) | 8u512-b09~us1-0ubuntu1~24.04.1 | openjdk-8-jdk-headless 8u512-b09~us1-0ubuntu1~24.04.1 | Nov 11, 2026 |
| openjdk-8-jdk-headless · Ubuntu 26.04.1 LTS (resolute) | 8u512-b09~us1-0ubuntu1~26.04.1 | openjdk-8-jdk-headless 8u512-b09~us1-0ubuntu1~26.04.1 | Nov 11, 2026 |
| openjdk-8-jre · Ubuntu 18.04.6 LTS (bionic) | 8u512-b09~us1-0ubuntu1~18.04.1 | openjdk-8-jre 8u512-b09~us1-0ubuntu1~18.04.1 | Nov 11, 2026 |
| openjdk-8-jre · Ubuntu 20.04 LTS (focal) | 8u512-b09~us1-0ubuntu1~20.04.1 | openjdk-8-jre 8u512-b09~us1-0ubuntu1~20.04.1 | Nov 11, 2026 |
| openjdk-8-jre · Ubuntu 22.04.1 LTS (jammy) | 8u512-b09~us1-0ubuntu1~22.04.1 | openjdk-8-jre 8u512-b09~us1-0ubuntu1~22.04.1 | Nov 11, 2026 |
| openjdk-8-jre · Ubuntu 24.04.5 LTS (noble) | 8u512-b09~us1-0ubuntu1~24.04.1 | openjdk-8-jre 8u512-b09~us1-0ubuntu1~24.04.1 | Nov 11, 2026 |
| openjdk-8-jre · Ubuntu 26.04.1 LTS (resolute) | 8u512-b09~us1-0ubuntu1~26.04.1 | openjdk-8-jre 8u512-b09~us1-0ubuntu1~26.04.1 | Nov 11, 2026 |
| openjdk-8-jre-headless · Ubuntu 18.04.6 LTS (bionic) | 8u512-b09~us1-0ubuntu1~18.04.1 | openjdk-8-jre-headless 8u512-b09~us1-0ubuntu1~18.04.1 | Nov 11, 2026 |
| openjdk-8-jre-headless · Ubuntu 20.04 LTS (focal) | 8u512-b09~us1-0ubuntu1~20.04.1 | openjdk-8-jre-headless 8u512-b09~us1-0ubuntu1~20.04.1 | Nov 11, 2026 |
| openjdk-8-jre-headless · Ubuntu 22.04.1 LTS (jammy) | 8u512-b09~us1-0ubuntu1~22.04.1 | openjdk-8-jre-headless 8u512-b09~us1-0ubuntu1~22.04.1 | Nov 11, 2026 |
| openjdk-8-jre-headless · Ubuntu 24.04.5 LTS (noble) | 8u512-b09~us1-0ubuntu1~24.04.1 | openjdk-8-jre-headless 8u512-b09~us1-0ubuntu1~24.04.1 | Nov 11, 2026 |
| openjdk-8-jre-headless · Ubuntu 26.04.1 LTS (resolute) | 8u512-b09~us1-0ubuntu1~26.04.1 | openjdk-8-jre-headless 8u512-b09~us1-0ubuntu1~26.04.1 | Nov 11, 2026 |
| openjdk-8-jre-zero · Ubuntu 18.04.6 LTS (bionic) | 8u512-b09~us1-0ubuntu1~18.04.1 | openjdk-8-jre-zero 8u512-b09~us1-0ubuntu1~18.04.1 | Nov 11, 2026 |
| openjdk-8-jre-zero · Ubuntu 20.04 LTS (focal) | 8u512-b09~us1-0ubuntu1~20.04.1 | openjdk-8-jre-zero 8u512-b09~us1-0ubuntu1~20.04.1 | Nov 11, 2026 |
| openjdk-8-jre-zero · Ubuntu 22.04.1 LTS (jammy) | 8u512-b09~us1-0ubuntu1~22.04.1 | openjdk-8-jre-zero 8u512-b09~us1-0ubuntu1~22.04.1 | Nov 11, 2026 |
| openjdk-8-jre-zero · Ubuntu 24.04.5 LTS (noble) | 8u512-b09~us1-0ubuntu1~24.04.1 | openjdk-8-jre-zero 8u512-b09~us1-0ubuntu1~24.04.1 | Nov 11, 2026 |
| openjdk-8-jre-zero · Ubuntu 26.04.1 LTS (resolute) | 8u512-b09~us1-0ubuntu1~26.04.1 | openjdk-8-jre-zero 8u512-b09~us1-0ubuntu1~26.04.1 | Nov 11, 2026 |
| openjdk-8-source · Ubuntu 18.04.6 LTS (bionic) | 8u512-b09~us1-0ubuntu1~18.04.1 | openjdk-8-source 8u512-b09~us1-0ubuntu1~18.04.1 | Nov 11, 2026 |
| openjdk-8-source · Ubuntu 20.04 LTS (focal) | 8u512-b09~us1-0ubuntu1~20.04.1 | openjdk-8-source 8u512-b09~us1-0ubuntu1~20.04.1 | Nov 11, 2026 |
| openjdk-8-source · Ubuntu 22.04.1 LTS (jammy) | 8u512-b09~us1-0ubuntu1~22.04.1 | openjdk-8-source 8u512-b09~us1-0ubuntu1~22.04.1 | Nov 11, 2026 |
| openjdk-8-source · Ubuntu 24.04.5 LTS (noble) | 8u512-b09~us1-0ubuntu1~24.04.1 | openjdk-8-source 8u512-b09~us1-0ubuntu1~24.04.1 | Nov 11, 2026 |
| openjdk-8-source · Ubuntu 26.04.1 LTS (resolute) | 8u512-b09~us1-0ubuntu1~26.04.1 | openjdk-8-source 8u512-b09~us1-0ubuntu1~26.04.1 | Nov 11, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.