Oracle Graalvm For JDK vulnerabilities

67 CVEs affecting Oracle Graalvm For JDK, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-62574, published 2026-07-21.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-22049, published 2023-07-18. Low severity, CVSS 3.7. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java…
• CVE-2023-22081, published 2023-10-17. Medium severity, CVSS 5.3. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:…
• CVE-2024-21011, published 2024-04-16. Low severity, CVSS 3.7. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…
• CVE-2023-22044, published 2023-07-18. Low severity, CVSS 3.7. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…
• CVE-2023-22045, published 2023-07-18. Low severity, CVSS 3.7. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…
• CVE-2024-21068, published 2024-04-16. Low severity, CVSS 3.7. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…
• CVE-2025-30749, published 2025-07-15. High severity, CVSS 8.1. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE:…
• CVE-2023-22036, published 2023-07-18. Low severity, CVSS 3.7. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility). Supported versions that are affected are Oracle Java…
• CVE-2024-21138, published 2024-07-16. Low severity, CVSS 3.7. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java…
• CVE-2024-21217, published 2024-10-15. Low severity, CVSS 3.7. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle…

Latest

• CVE-2026-62574, published 2026-07-21. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java…
• CVE-2026-60147, published 2026-07-21. Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java…
• CVE-2026-47063, published 2026-07-21. High severity, CVSS 7.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java…
• CVE-2026-47059, published 2026-07-21. Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE:…
• CVE-2026-47027, published 2026-07-21. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK:…
• CVE-2026-47021, published 2026-07-21. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE:…
• CVE-2026-47010, published 2026-07-21. Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java…
• CVE-2026-46968, published 2026-07-21. Medium severity, CVSS 5.9. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK:…
• CVE-2026-46917, published 2026-07-21. Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE:…
• CVE-2026-34282, published 2026-04-21. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java…