← Back

CVE-2026-62574

nvd nist
Published: Jul 21, 2026Modified: Aug 18, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: secalert_us@oracle.com (Secondary)

Description

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u501, 11.0.32, 17.0.20, 21.0.12, 25.0.4, 26.0.2; Oracle GraalVM for JDK: 17.0.20 and 21.0.12; Oracle GraalVM Enterprise Edition: 21.3.19. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Affected (15)

4 products
Jre
Jdk
Graalvm
Graalvm For Jdk
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Version 1.8.0 update491
Version 11.0.31
Version 17.0.19
Version 21.0.11
Version 25.0.3
Version 26.0.1
Configuration B
6 vulnerable
Vulnerable SoftwareAffected Versions
Oracle
Version 1.8.0 update491
Version 11.0.31
Version 17.0.19
Version 21.0.11
Version 25.0.3
Version 26.0.1
Configuration C
3 vulnerable
Vulnerable SoftwareAffected Versions
Version 21.3.18
Oracle
Version 17.0.19
Version 21.0.11

References (1)

Timeline

No history available yet.