# Oracle Graalvm for Jdk


- [CVE-2025-50059](https://insights.sbomify.com/CVE-2025-50059/): Security feature bypass in Oracle GraalVM Enterprise Edition (high 8.6)
- [CVE-2025-30749](https://insights.sbomify.com/CVE-2025-30749/): Code injection in Oracle GraalVM Enterprise Edition (high 8.1)
- [CVE-2025-50106](https://insights.sbomify.com/CVE-2025-50106/): Code injection in Oracle GraalVM Enterprise Edition (high 8.1)
- [CVE-2026-62574](https://insights.sbomify.com/CVE-2026-62574/): Privilege escalation in Oracle GraalVM Enterprise Edition (high 7.8)
- [CVE-2026-47063](https://insights.sbomify.com/CVE-2026-47063/): Missing authorization in Oracle GraalVM Enterprise Edition (high 7.5)
- [CVE-2026-22016](https://insights.sbomify.com/CVE-2026-22016/): XML external entity in Oracle GraalVM Enterprise Edition (high 7.5)
- [CVE-2026-34282](https://insights.sbomify.com/CVE-2026-34282/): Denial of service in Oracle GraalVM Enterprise Edition (high 7.5)
- [CVE-2026-21945](https://insights.sbomify.com/CVE-2026-21945/): Denial of service in Oracle GraalVM Enterprise Edition (high 7.5)
- [CVE-2025-53066](https://insights.sbomify.com/CVE-2025-53066/): Information disclosure in Oracle GraalVM Enterprise Edition (high 7.5)
- [CVE-2024-20932](https://insights.sbomify.com/CVE-2024-20932/): Security feature bypass in Java SE JDK and JRE (high 7.5)
- [CVE-2026-21932](https://insights.sbomify.com/CVE-2026-21932/): Other in Oracle GraalVM Enterprise Edition (high 7.4)
- [CVE-2025-21587](https://insights.sbomify.com/CVE-2025-21587/): Security feature bypass in Oracle GraalVM Enterprise Edition (high 7.4)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/graalvm-for-jdk/