Vulnerability in Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u491, 8u491-perf and 11.0.31. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdkUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-src-slowdebug | Jul 26, 2026 | Jul 23, 2026 |
| Alpine Linux | — | Upgrade openjdk11 | Aug 4, 2026 | Jul 21, 2026 |
| Amazon Linux Ami 2 | — | Upgrade java-11-amazon-corretto-javadocUpgrade java-1.8.0-openjdk-demo-debugUpgrade java-1.8.0-openjdk-src-debugUpgrade java-1.8.0-amazon-corretto-develUpgrade java-1.8.0-openjdk-debugUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-javadoc-debugUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-11-amazon-corretto-headlessUpgrade java-1.8.0-openjdk-headlessUpgrade java-1.8.0-openjdk-headless-debugUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-openjdk-srcUpgrade java-1.8.0-openjdkUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-javadoc-zip-debugUpgrade java-1.8.0-openjdk-develUpgrade java-1.8.0-openjdk-devel-debugUpgrade java-1.8.0-openjdk-accessibility-debugUpgrade java-1.8.0-amazon-corretto-debugsymbolsUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-11-amazon-correttoUpgrade java-1.8.0-amazon-corretto | Aug 5, 2026 | Aug 5, 2026 |
| Amazon_linux_2023 | — | Upgrade java-1.8.0-amazon-corretto-develUpgrade java-11-amazon-corretto-javadocUpgrade java-1.8.0-amazon-corretto-debugsymbolsUpgrade java-11-amazon-corretto-headlessUpgrade java-11-amazon-corretto-debugsymbolsUpgrade java-1.8.0-amazon-correttoUpgrade java-11-amazon-correttoUpgrade java-11-amazon-corretto-develUpgrade java-11-amazon-corretto-jmods | Aug 10, 2026 | Jul 21, 2026 |
| Azul Zulu | — | Upgrade to Azul Zulu JDK 11 installer 11.89.14 (JDK 11.0.31.0.101+1, quarterly CPU) (LTS stream)Upgrade to Azul Zulu JDK 8 installer 8.95.0.14 (JDK 8u501-b01, quarterly CPU) (LTS stream) | Jul 30, 2026 | Jul 21, 2026 |
| Debian | — | Upgrade openjdk-11 | Jul 29, 2026 | Jul 29, 2026 |
| Eclipseadoptium | — | Upgrade to the latest version of Eclipse Adoptium | Jul 24, 2026 | Jul 21, 2026 |
| Ibm Aix | — | Apply the fix or workaround for aix_vios_advisory | Aug 16, 2026 | Aug 14, 2026 |
| Ibm Java | — | Upgrade IBM Java to version 8.0.8.70 | Jul 21, 2026 | Jul 21, 2026 |
| Ibm Was | — | Upgrade to minimal fix pack levels as required by interim fixes and then apply latest Interim Fix. | Jul 21, 2026 | Jul 21, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Jul 23, 2026 | Jul 21, 2026 |
| Redhat_linux | — | Upgrade java-11-openjdk-src-debugUpgrade java-11-openjdk-devel-slowdebugUpgrade java-1.8.0-openjdk-demo-debuginfoUpgrade java-1.8.0-openjdk-headless-debuginfoUpgrade java-11-openjdk-devel-fastdebugUpgrade java-1.8.0-openjdk-accessibility-fastdebugUpgrade java-1.8.0-openjdk-srcUpgrade java-11-openjdk-demo-slowdebugUpgrade java-1.8.0-openjdk-headless-slowdebug-debuginfoUpgrade java-11-openjdk-demo-debugUpgrade java-11-openjdk-headless-slowdebugUpgrade java-1.8.0-openjdk-slowdebug-debuginfoUpgrade java-1.8.0-ibm-demoUpgrade java-11-openjdk-static-libs-debugUpgrade java-11-openjdkUpgrade java-11-openjdk-devel-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-devel-fastdebugUpgrade java-1.8.0-ibm-headlessUpgrade java-11-openjdk-javadoc-debugUpgrade java-11-openjdk-devel-debugUpgrade java-1.8.0-openjdk-demo-slowdebugUpgrade java-11-openjdk-demoUpgrade java-11-openjdk-slowdebugUpgrade java-1.8.0-ibmUpgrade java-11-openjdk-debuginfoUpgrade java-11-openjdk-fastdebug-debuginfoUpgrade java-11-openjdk-static-libs-fastdebugUpgrade java-1.8.0-ibm-jdbcUpgrade java-1.8.0-openjdk-debuginfoUpgrade java-1.8.0-ibm-develUpgrade java-11-openjdk-srcUpgrade java-11-openjdk-slowdebug-debuginfoUpgrade java-11-openjdk-javadocUpgrade java-1.8.0-openjdk-src-fastdebugUpgrade java-11-openjdk-headless-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-headless-fastdebugUpgrade java-11-openjdk-headless-fastdebugUpgrade java-1.8.0-openjdk-demo-fastdebug-debuginfoUpgrade java-11-openjdk-static-libs-slowdebugUpgrade java-11-openjdk-fastdebugUpgrade java-11-openjdk-demo-fastdebugUpgrade java-11-openjdk-headless-fastdebug-debuginfoUpgrade java-11-openjdk-debugUpgrade java-1.8.0-openjdk-src-slowdebugUpgrade java-1.8.0-openjdk-javadocUpgrade java-1.8.0-openjdk-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-headless-fastdebug-debuginfoUpgrade java-1.8.0-ibm-pluginNo solution existsUpgrade java-11-openjdk-static-libsUpgrade java-1.8.0-ibm-webstartUpgrade java-1.8.0-openjdk-devel-fastdebug-debuginfoUpgrade java-11-openjdk-headlessUpgrade java-1.8.0-openjdk-devel-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-demoUpgrade java-1.8.0-openjdk-accessibilityUpgrade java-1.8.0-ibm-srcUpgrade java-1.8.0-openjdkUpgrade java-11-openjdk-jmods-debugUpgrade java-1.8.0-openjdk-demo-fastdebugUpgrade java-11-openjdk-src-fastdebugUpgrade java-11-openjdk-jmodsUpgrade java-11-openjdk-develUpgrade java-1.8.0-openjdk-headless-slowdebugUpgrade java-11-openjdk-src-slowdebugUpgrade java-11-openjdk-javadoc-zip-debugUpgrade java-11-openjdk-javadoc-zipUpgrade java-1.8.0-openjdk-demo-slowdebug-debuginfoUpgrade java-1.8.0-openjdk-develUpgrade java-11-openjdk-debugsourceUpgrade java-1.8.0-openjdk-accessibility-slowdebugUpgrade java-11-openjdk-jmods-slowdebugUpgrade java-1.8.0-openjdk-slowdebugUpgrade java-1.8.0-openjdk-fastdebugUpgrade java-11-openjdk-headless-debugUpgrade java-1.8.0-openjdk-debugsourceUpgrade java-1.8.0-openjdk-devel-slowdebugUpgrade java-11-openjdk-jmods-fastdebugUpgrade java-11-openjdk-devel-debuginfoUpgrade java-1.8.0-openjdk-devel-debuginfoUpgrade java-11-openjdk-headless-debuginfoUpgrade java-11-openjdk-devel-fastdebug-debuginfoUpgrade java-1.8.0-openjdk-headless | Jul 23, 2026 | Jul 21, 2026 |
| Ubuntu | — | Upgrade openjdk-11-jre-zeroUpgrade openjdk-8-jre-jamvmUpgrade openjdk-11-jdk-headlessUpgrade openjdk-8-jdkUpgrade openjdk-8-jre-zeroUpgrade openjdk-11-jre-headlessUpgrade openjdk-11-jreUpgrade openjdk-11-jdkUpgrade openjdk-8-jre-headlessUpgrade openjdk-8-jreUpgrade openjdk-8-jdk-headless | Aug 26, 2026 | Aug 25, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub