CVSS 3.1
Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)
Атакува се
Време до експлоатация
Атакува се по мрежата, без особени условия, без вход и без действие от потребителя.
- Експлоатация: няма данни за експлоатация
- Атаката може да се автоматизира
Засегнати продукти
- Oracle Corporation Oracle Java SE: 8u471; 8u471-b50; 8u471-perf; 11.0.29; 17.0.17; 21.0.9; 25.0.1
- Oracle Corporation Oracle GraalVM for JDK: 17.0.17; 21.0.9
- Oracle Corporation Oracle GraalVM Enterprise Edition: 21.3.16
- Siemens SIMATIC CN 4100: преди V5.0
Red Hat: още 28 продукта, добавени от Red Hat
OPENJDK ELS 11.0.30, Red Hat Build of OpenJDK 17.0.18, Red Hat Build of OpenJDK 21.0.10, Red Hat Build of OpenJDK 25.0.2, Red Hat Build of OpenJDK 8u482, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 10.0 Extended Update Support, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Telecommunications Update Service, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 9.6 Extended Update Support, Red Hat OpenJDK 11 els for RHEL 7, Red Hat OpenJDK 11 els for RHEL 8, Red Hat OpenJDK 11 els for RHEL 9, Temurin Build of OpenJDK 25.0.2, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7
Вид слабост
История
- 20 януари 2026 Публикувано
Други уязвимости в Oracle Corporation Oracle Java SE
Първоизточници
- https://www.cve.org/CVERecord?id=CVE-2026-21945
- https://nvd.nist.gov/vuln/detail/CVE-2026-21945
- https://www.oracle.com/security-alerts/cpujan2026.html
- https://cert-portal.siemens.com/productcert/html/ssa-032379.html
- https://access.redhat.com/security/cve/CVE-2026-21945
- https://bugzilla.redhat.com/show_bug.cgi?id=2429927
- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-21945.json
- https://access.redhat.com/errata/RHSA-2026:0931
- https://access.redhat.com/errata/RHSA-2026:0847
- https://access.redhat.com/errata/RHSA-2026:0928
- https://access.redhat.com/errata/RHSA-2026:0933
- https://access.redhat.com/errata/RHSA-2026:0932
- https://access.redhat.com/errata/RHSA-2026:0927
- https://access.redhat.com/errata/RHSA-2026:0848
- https://access.redhat.com/errata/RHSA-2026:0897
- https://access.redhat.com/errata/RHSA-2026:0899
- https://access.redhat.com/errata/RHSA-2026:0901
- https://access.redhat.com/errata/RHSA-2026:0895
- https://access.redhat.com/errata/RHSA-2026:4832
- https://access.redhat.com/errata/RHSA-2026:1606