Vulnerability in Oracle Java SE and Oracle GraalVM Products
CVE-2026-62574

7.8HIGH

Key Information:

Vendor

Oracle
Status
Oracle Java Se
Oracle Graalvm For Jdk
Oracle Graalvm Enterprise Edition
Vendor
CVE Published:
21 July 2026

What is CVE-2026-62574?

A vulnerability identified within Oracle Java SE and Oracle GraalVM products allows low privileged attackers with logon access to potentially take control of the affected systems. This flaw affects several versions of both Oracle Java SE and Oracle GraalVM, highlighting the critical importance of applying security updates to mitigate risks associated with possible system takeovers.

Affected Version(s)

Oracle GraalVM Enterprise Edition 21.3.18

Oracle GraalVM for JDK 17.0.19

Oracle GraalVM for JDK 21.0.11

References

https://www.oracle.com/security-alerts/cpujul2026.html
vendor-advisory

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.