CVE-2026-87255Low· 3.7▾ SunlitA flaw was found in OpenJDK's Compiler component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted data to exposed compiler Application Programming Interfaces (APIs), such as through a web…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 20.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 22.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
Last analysed / modified upstream
0.3%
0.3% → 0.3%
A flaw was found in OpenJDK's Compiler component. An unauthenticated remote attacker could exploit this vulnerability by submitting specially crafted data to exposed compiler Application Programming Interfaces (APIs), such as through a web service. Successful exploitation allows unauthorized read access to accessible data, resulting in information disclosure.
openjdk: Enhance Vector Processing (Oracle CPU 2026-10) — rated Low by Red Hat. Released 2026-10-20, updated 2026-10-22.
Affected:
No fix planned:
Not affected:
Out of support scope
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-114043Medium· 6.5freerdp: FreeRDP: heap out-of-bounds read in WinPR clipboard PNG-to-CF_DIB synthesis (CVE-2026-114043)
CVE-2026-101607Medium· 4.9mysql: mysql: Denial of Service in Server Optimizer (CVE-2026-101607)
CVE-2026-101608Medium· 6.5mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101608)
CVE-2026-101609Medium· 4.4mysql: mysql: Denial of service in InnoDB (CVE-2026-101609)
CVE-2026-101610Medium· 4.9mysql: mysql: Denial of Service via Server Optimizer component (CVE-2026-101610)
CVE-2026-101611Medium· 4.4mysql: mysql: Denial of Service in InnoDB (CVE-2026-101611)