OpenJDK 8 vulnerabilities
It was discovered that the Security component of OpenJDK 8 did not correctly authenticate users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83374) It was discovered that the JSSE component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to modify sensitive data. (CVE-2026-83376, CVE-2026-91461) It was discovered that the JAAS component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this issue to read sensitive data. (CVE-2026-83380) It was discovered that the Security component of OpenJDK 8 did not correctly authorize users. A remote attacker could possibly use this
Read at Ubuntu Security Notices
- Vendor
- Canonical, Oracle
- Product
- Java SE / JDK
- EPSS
- 0.003 (p17)
- Exposure class
- Developer platform
Why it ranks 46 (High)
- Product class: developer platform
- Widely deployed vendor product (Canonical)
- Covered by 3 independent sources
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)
- CVE-2026-83374 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-83376 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-91461 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-83380 on this site · NVD · CVE.org · Vulnpedia
- CVE-2026-83381 on this site · NVD · CVE.org · Vulnpedia
Related coverage
Other items that share a CVE or were clustered with this one.