Multiple vulnerabilities in Oracle Java

Description

Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability can be exploited remotely to cause denial of service.
2. Memory safety vulnerability can be exploited to execute arbitrary code.
3. Integer underflow vulnerability can be exploited to cause denial of service.
4. An elevation of privilege vulnerability can be exploited remotely to gain privileges.
5. Security vulnerability can be exploited to bypass security restrictions.

Original advisories

• Oracle Critical Patch Update Advisory – July 2026

Exploitation

Public exploits exist for this vulnerability.

CVE list

• CVE-2026-41254
  critical
• CVE-2026-46917
  high
• CVE-2026-46968
  high
• CVE-2026-47010
  warning
• CVE-2026-47013
  high
• CVE-2026-47021
  high
• CVE-2026-47027
  high
• CVE-2026-47030
  warning
• CVE-2026-47034
  warning
• CVE-2026-47035
  warning
• CVE-2026-47057
  critical
• CVE-2026-47058
  high
• CVE-2026-47059
  warning
• CVE-2026-47063
  critical
• CVE-2026-60147
  high
• CVE-2026-60164
  warning
• CVE-2026-60166
  warning
• CVE-2026-60526
  high
• CVE-2026-62574
  critical

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com