CVE-2026-62574 PUBLISHED

Assigner: oracle
Reserved: 14.07.2026 Published: 21.07.2026 Updated: 22.07.2026

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install). Supported versions that are affected are Oracle Java SE: 8u491, 11.0.31, 17.0.19, 21.0.11, 25.0.3, 26.0.1; Oracle GraalVM for JDK: 17.0.19 and 21.0.11; Oracle GraalVM Enterprise Edition: 21.3.18. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. CVSS 3.1 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).

Metrics

CVSS Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 7.8

Product Status

Vendor Oracle Corporation
Product Oracle Java SE
Versions
  • Version 8u491 is affected
  • Version 11.0.31 is affected
  • Version 17.0.19 is affected
  • Version 21.0.11 is affected
  • Version 25.0.3 is affected
  • Version 26.0.1 is affected
Vendor Oracle Corporation
Product Oracle GraalVM for JDK
Versions
  • Version 17.0.19 is affected
  • Version 21.0.11 is affected
Vendor Oracle Corporation
Product Oracle GraalVM Enterprise Edition
Versions
  • Version 21.3.18 is affected

References

Problem Types