{"document":{"aggregate_severity":{"text":"mittel"},"category":"csaf_base","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"de-DE","notes":[{"category":"legal_disclaimer","text":"Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."},{"category":"description","text":"Die Java Platform, Standard Edition (SE) ist eine Sammlung von Java-APIs (JDK) und der Java Laufzeit Umgebung (JRE).","title":"Produktbeschreibung"},{"category":"summary","text":"Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.","title":"Angriff"},{"category":"general","text":"- Linux\n- UNIX\n- Windows","title":"Betroffene Betriebssysteme"}],"publisher":{"category":"other","contact_details":"csaf-provider@cert-bund.de","name":"Bundesamt für Sicherheit in der Informationstechnik","namespace":"https://www.bsi.bund.de"},"references":[{"category":"self","summary":"WID-SEC-W-2026-4079 - CSAF Version","url":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-4079.json"},{"category":"self","summary":"WID-SEC-2026-4079 - Portal Version","url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4079"},{"category":"external","summary":"Oracle Critical Patch Update Advisory - October 2026 - Appendix Oracle Java SE vom 2026-10-20","url":"https://www.oracle.com/security-alerts/cpuoct2026.html#AppendixJAVA"}],"source_lang":"en-US","title":"Oracle Java SE: Mehrere Schwachstellen","tracking":{"current_release_date":"2026-10-20T22:00:00.000+00:00","generator":{"date":"2026-10-21T11:30:55.117+00:00","engine":{"name":"BSI-WID","version":"1.6.0"}},"id":"WID-SEC-W-2026-4079","initial_release_date":"2026-10-20T22:00:00.000+00:00","revision_history":[{"date":"2026-10-20T22:00:00.000+00:00","number":"1","summary":"Initiale Fassung"}],"status":"final","version":"1"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"17.0.20.1","product":{"name":"Oracle GraalVM 17.0.20.1","product_id":"T061525","product_identification_helper":{"cpe":"cpe:/a:oracle:graalvm:17.0.20.1"}}},{"category":"product_version","name":"21.3.19.1.1","product":{"name":"Oracle GraalVM 21.3.19.1.1","product_id":"T061526","product_identification_helper":{"cpe":"cpe:/a:oracle:graalvm:21.3.19.1.1"}}},{"category":"product_version","name":"21.0.12.1","product":{"name":"Oracle GraalVM 21.0.12.1","product_id":"T061527","product_identification_helper":{"cpe":"cpe:/a:oracle:graalvm:21.0.12.1"}}}],"category":"product_name","name":"GraalVM"},{"branches":[{"category":"product_version","name":"26.0.2","product":{"name":"Oracle Java SE 26.0.2","product_id":"T058282","product_identification_helper":{"cpe":"cpe:/a:oracle:java_se:26.0.2"}}},{"category":"product_version","name":"8u503","product":{"name":"Oracle Java SE 8u503","product_id":"T061515","product_identification_helper":{"cpe":"cpe:/a:oracle:java_se:8u503"}}},{"category":"product_version","name":"8u503-perf","product":{"name":"Oracle Java SE 8u503-perf","product_id":"T061516","product_identification_helper":{"cpe":"cpe:/a:oracle:java_se:8u503-perf"}}},{"category":"product_version","name":"11.0.32.1","product":{"name":"Oracle Java SE 11.0.32.1","product_id":"T061520","product_identification_helper":{"cpe":"cpe:/a:oracle:java_se:11.0.32.1"}}},{"category":"product_version","name":"17.0.20.1","product":{"name":"Oracle Java SE 17.0.20.1","product_id":"T061521","product_identification_helper":{"cpe":"cpe:/a:oracle:java_se:17.0.20.1"}}},{"category":"product_version","name":"21.0.12.1","product":{"name":"Oracle Java SE 21.0.12.1","product_id":"T061522","product_identification_helper":{"cpe":"cpe:/a:oracle:java_se:21.0.12.1"}}},{"category":"product_version","name":"25.0.4.1","product":{"name":"Oracle Java SE 25.0.4.1","product_id":"T061523","product_identification_helper":{"cpe":"cpe:/a:oracle:java_se:25.0.4.1"}}},{"category":"product_version","name":"27","product":{"name":"Oracle Java SE 27","product_id":"T061524","product_identification_helper":{"cpe":"cpe:/a:oracle:java_se:27"}}}],"category":"product_name","name":"Java SE"},{"branches":[{"category":"product_version","name":"21.0.12","product":{"name":"Oracle JavaFX 21.0.12","product_id":"T061517","product_identification_helper":{"cpe":"cpe:/a:oracle:javafx:21.0.12"}}},{"category":"product_version","name":"25.0.4","product":{"name":"Oracle JavaFX 25.0.4","product_id":"T061518","product_identification_helper":{"cpe":"cpe:/a:oracle:javafx:25.0.4"}}},{"category":"product_version","name":"27","product":{"name":"Oracle JavaFX 27","product_id":"T061519","product_identification_helper":{"cpe":"cpe:/a:oracle:javafx:27"}}}],"category":"product_name","name":"JavaFX"}],"category":"vendor","name":"Oracle"}]},"vulnerabilities":[{"cve":"CVE-2026-101516","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101516"},{"cve":"CVE-2026-101737","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-101737"},{"cve":"CVE-2026-43660","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-43660"},{"cve":"CVE-2026-46470","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-46470"},{"cve":"CVE-2026-6732","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-6732"},{"cve":"CVE-2026-83374","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-83374"},{"cve":"CVE-2026-83376","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-83376"},{"cve":"CVE-2026-83378","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-83378"},{"cve":"CVE-2026-83380","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-83380"},{"cve":"CVE-2026-83381","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-83381"},{"cve":"CVE-2026-83387","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-83387"},{"cve":"CVE-2026-83395","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-83395"},{"cve":"CVE-2026-83400","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-83400"},{"cve":"CVE-2026-87255","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-87255"},{"cve":"CVE-2026-87290","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-87290"},{"cve":"CVE-2026-87291","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-87291"},{"cve":"CVE-2026-87292","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-87292"},{"cve":"CVE-2026-87293","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-87293"},{"cve":"CVE-2026-87294","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-87294"},{"cve":"CVE-2026-87367","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-87367"},{"cve":"CVE-2026-91332","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91332"},{"cve":"CVE-2026-91333","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91333"},{"cve":"CVE-2026-91334","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91334"},{"cve":"CVE-2026-91335","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91335"},{"cve":"CVE-2026-91373","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91373"},{"cve":"CVE-2026-91374","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91374"},{"cve":"CVE-2026-91375","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91375"},{"cve":"CVE-2026-91379","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91379"},{"cve":"CVE-2026-91380","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91380"},{"cve":"CVE-2026-91381","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91381"},{"cve":"CVE-2026-91382","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91382"},{"cve":"CVE-2026-91385","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91385"},{"cve":"CVE-2026-91394","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91394"},{"cve":"CVE-2026-91395","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91395"},{"cve":"CVE-2026-91396","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91396"},{"cve":"CVE-2026-91397","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91397"},{"cve":"CVE-2026-91398","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91398"},{"cve":"CVE-2026-91400","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91400"},{"cve":"CVE-2026-91402","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91402"},{"cve":"CVE-2026-91409","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91409"},{"cve":"CVE-2026-91410","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91410"},{"cve":"CVE-2026-91411","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91411"},{"cve":"CVE-2026-91415","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91415"},{"cve":"CVE-2026-91417","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91417"},{"cve":"CVE-2026-91418","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91418"},{"cve":"CVE-2026-91451","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91451"},{"cve":"CVE-2026-91452","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91452"},{"cve":"CVE-2026-91453","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91453"},{"cve":"CVE-2026-91461","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91461"},{"cve":"CVE-2026-91462","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91462"},{"cve":"CVE-2026-91463","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91463"},{"cve":"CVE-2026-91464","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91464"},{"cve":"CVE-2026-91477","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91477"},{"cve":"CVE-2026-91484","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91484"},{"cve":"CVE-2026-91487","product_status":{"known_affected":["T061517","T061518","T061519","T061524","T061525","T061515","T061526","T061516","T061527","T058282","T061520","T061521","T061522","T061523"]},"release_date":"2026-10-20T22:00:00.000+00:00","title":"CVE-2026-91487"}]}