High Threat Security Alert (A26-08-28): Multiple Vulnerabilities in Oracle Products (August 2026)


 

Published on: 19 August 2026

Description:

Oracle has released the Critical Security Patch Update Advisory with collections of patches for multiple security vulnerabilities found in various Oracle products. The list of security updates can be found at:
https://www.oracle.com/security-alerts/cspuaug2026.html

Reports indicated that proof-of-concept (PoC) exploit code for multiple vulnerabilities (CVE-2022-37434, CVE-2022-40152, CVE-2023-50164, CVE-2026-2332, CVE-2026-9563, CVE-2026-41240, CVE-2026-42587 and CVE-2026-65914) is available. System administrators are advised to take immediate action to patch your affected systems to mitigate the elevated risk of cyber attacks.

 

Affected Systems:

  • Oracle Java SE
  • Database
  • Fusion Applications and Middleware
  • Oracle MySQL Product Suite
  • Oracle Linux and Virtualization

A complete list of the affected products can be found at:

https://www.oracle.com/security-alerts/cspuaug2026.html

 

Impact:

Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, elevation of privilege, information disclosure, security restriction bypass, spoofing or tampering on an affected system.

 

Recommendation:

Patches for affected systems are available. Users of the affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.

For Oracle Java SE products, please refer to the following link:

Java Platform SE 8u503 (JDK and JRE)
Java Platform SE 11.0.32.1 (JDK and JRE)
Java Platform SE 17.0.20.1 (JDK and JRE)
Java Platform SE 21.0.12.1 (JDK and JRE)
Java Platform SE 25.0.4.1 (JDK and JRE)
Java Platform SE 26.0.2.1 (JDK and JRE)
https://www.oracle.com/java/technologies/javase-downloads.html

For OpenJDK, please refer to the following link:
https://jdk.java.net

Users could also access the security advisory below for the information about the security updates of other Oracle products:
https://www.oracle.com/security-alerts/cspuaug2026.html

Users may contact their product support vendors for the fixes and assistance.

 

More Information:

  • https://www.oracle.com/security-alerts/cspuaug2026.html
  • https://www.hkcert.org/security-bulletin/oracle-products-multiple-vulnerabilities_20260819
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4104
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-31805
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23305
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23437
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34169
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-37434
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40150
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40152
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-26464
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-50164
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-9143
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-10095
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-13151
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-14821
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-0968
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-2332
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4176
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-4800
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-5795
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-9563
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29167
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33186
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33557
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-33929
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-34481
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41240
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41855
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42587
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42764
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-42779
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45447
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-55956
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59084
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-59889
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60391 (to CVE-2026-60393)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60412 (to CVE-2026-60415)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60589 (to CVE-2026-60592)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60672
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60679 (to CVE-2026-60680)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60682
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60693
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60696
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60698 (to CVE-2026-60699)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60702
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60707
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60715 (to CVE-2026-60716)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60720 (to CVE-2026-60722)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60726 (to CVE-2026-60731)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60733
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60737
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60742
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60748
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60751 (to CVE-2026-60754)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60757 (to CVE-2026-60759)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60765 (to CVE-2026-60767)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60769
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60779
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60781 (to CVE-2026-60782)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60791 (to CVE-2026-60792)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60796 (to CVE-2026-60798)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60803
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60808
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60820 (to CVE-2026-60822)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60830 (to CVE-2026-60831)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60841
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60849 (to CVE-2026-60850)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60853
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60856
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60858
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60860 (to CVE-2026-60861)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60865 (to CVE-2026-60866)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60873
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60879
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60883 (to CVE-2026-60884)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60889
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60895
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60902 (to CVE-2026-60903)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60905 (to CVE-2026-60906)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60909
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60914 (to CVE-2026-60916)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60921
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60928
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60933 (to CVE-2026-60935)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60944
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60946 (to CVE-2026-60947)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60949
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60954 (to CVE-2026-60956)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60958
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60961
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60967
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60969 (to CVE-2026-60971)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60975 (to CVE-2026-60977)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60980 (to CVE-2026-60981)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60983
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60990 (to CVE-2026-60996)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-60998
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61001 (to CVE-2026-61003)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61007 (to CVE-2026-61008)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61011
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61016 (to CVE-2026-61018)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61021 (to CVE-2026-61022)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61029
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61032 (to CVE-2026-61034)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61038
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61040
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61042
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61045
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61054
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61058
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61066
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61118
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61124
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61139
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61177
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61193
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61198 (to CVE-2026-61199)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61206
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61208
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61212 (to CVE-2026-61213)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61215
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61219
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61222
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61227 (to CVE-2026-61231)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61241
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61248
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61258 (to CVE-2026-61259)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61265
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61268
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61270
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61272 (to CVE-2026-61273)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61276
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61281
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61284
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61286
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61288
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61290 (to CVE-2026-61291)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61293
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61295 (to CVE-2026-61296)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61298
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61300
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61302
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61305 (to CVE-2026-61308)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61313
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61317 (to CVE-2026-61319)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61321
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61326
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61330 (to CVE-2026-61332)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-61339 (to CVE-2026-61342)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62441 (to CVE-2026-62442)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62446
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62448 (to CVE-2026-62450)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62452
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62454 (to CVE-2026-62455)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62457 (to CVE-2026-62463)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62467
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62471
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62475
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62477
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62481
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62485
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62491 (to CVE-2026-62492)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62499 (to CVE-2026-62502)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62506
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62509 (to CVE-2026-62512)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62520
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62522 (to CVE-2026-62523)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62526
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62529
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62531 (to CVE-2026-62533)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62535 (to CVE-2026-62541)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62543 (to CVE-2026-62545)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62550 (to CVE-2026-62555)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62558
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62564
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62566
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62568 (to CVE-2026-62596)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-62598 (to CVE-2026-62640)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-65914
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70668 (to CVE-2026-70747)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70749 (to CVE-2026-70754)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70758 (to CVE-2026-70859)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70861 (to CVE-2026-70868)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70870 (to CVE-2026-70912)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70914
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-70916 (to CVE-2026-71046)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71048 (to CVE-2026-71053)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71055 (to CVE-2026-71085)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71087 (to CVE-2026-71092)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71094 (to CVE-2026-71132)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71134 (to CVE-2026-71162)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-71164 (to CVE-2026-71167)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73865 (to CVE-2026-73925)
  • https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-73927 (to CVE-2026-73939)


Tag: Oracle , Java , Oracle Database , Fusion , MySQL , Sun Systems , Oracle Linux
Tags