What’s Vulnerable › Products

The Eclipse Foundation Eclipse OpenJ9 vulnerabilities

28 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.

Check whether your The Eclipse Foundation Eclipse OpenJ9 version is affected

Latest The Eclipse Foundation Eclipse OpenJ9 vulnerabilities

• CVE-2026-111075 — JITServer: Pre-authentication remote crash via integer underflow and out-of-bounds heap read in DataDescriptor deserialization (CVSS 8.7)
• CVE-2026-111074 — JITServer: Pre-authentication remote Denial of Service via integer overflow infinite loop in MessageBuffer::computeRequiredCapacity() (CVSS 8.7)
• CVE-2026-110938 — JITServer: Multiple Denial of Service vulnerabilities via out-of-bounds heap reads during message and reply parsing (CVSS 8.7)
• CVE-2026-97400 — jdmpview / DTFJ reads arbitrary local files and makes arbitrary outbound requests when opening a third-party diagnostic dump bundle (XXE in XMLIndexReader) (CVSS 6.8)
• CVE-2026-16440 — (CVSS 5.7)
• CVE-2026-16441 — Eclipse OpenJ9 : Method resolution default method precedence failure (CVSS 9.6)
• CVE-2026-16439 — Eclipse OpenJ9 : Using -Xtrace to trace method arguments can lead to buffer underflow (CVSS 9.1)
• CVE-2026-6918 — (CVSS 7.5)
• CVE-2025-4447 — Buffer Overflow in Eclipse OpenJ9 (CVSS 7.8)
• CVE-2024-10917 — Eclipse OpenJ9 might return an incorrect value in JNI function GetStringUTFLength (CVSS 5.3)
• CVE-2024-3933 — Eclipse Open J9 With -Xgc:concurrentScavenge on IBM Z, could write/read outside of a buffer (CVSS 7.3)
• CVE-2023-5676 — Eclipse OpenJ9 possible infinite busy hang (CVSS 5.9)
• CVE-2023-2597 — (CVSS 9.1)
• CVE-2022-3676 — (CVSS 6.5)
• CVE-2021-41041 — (CVSS 5.3)
• CVE-2021-41035 — (CVSS 9.8)
• CVE-2021-28167 — (CVSS 6.5)
• CVE-2020-27221 — (CVSS 9.8)
• CVE-2019-17639 — (CVSS 5.3)
• CVE-2019-17631 — (CVSS 9.1)
• CVE-2019-11775 — (CVSS 7.4)
• CVE-2019-11772 — (CVSS 9.8)
• CVE-2019-11771 — (CVSS 7.8)
• CVE-2019-10245 — (CVSS 7.5)
• CVE-2018-12549 — (CVSS 9.8)