{"id":"UBUNTU-CVE-2026-91402","details":"(Vulnerability in the Oracle Java SE, Oracle JavaFX, Oracle GraalVM Ent ...)","modified":"2026-10-23T10:35:53.680383231Z","published":"2026-10-23T00:00:00Z","upstream":["CVE-2026-91402"],"references":[{"type":"REPORT","url":"https://ubuntu.com/security/CVE-2026-91402"},{"type":"REPORT","url":"https://www.cve.org/CVERecord?id=CVE-2026-91402"},{"type":"REPORT","url":"https://openjdk.org/groups/vulnerability/advisories/2026-10-20"}],"affected":[{"package":{"name":"openjfx","ecosystem":"Ubuntu:16.04:LTS","purl":"pkg:deb/ubuntu/openjfx?arch=source&distro=xenial"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u60-b27-4"],"ecosystem_specific":{"binaries":[{"binary_version":"8u60-b27-4","binary_name":"libopenjfx-java"},{"binary_name":"libopenjfx-jni","binary_version":"8u60-b27-4"},{"binary_name":"openjfx","binary_version":"8u60-b27-4"},{"binary_name":"openjfx-source","binary_version":"8u60-b27-4"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91402.json"}},{"package":{"name":"openjfx","ecosystem":"Ubuntu:18.04:LTS","purl":"pkg:deb/ubuntu/openjfx?arch=source&distro=bionic"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8u141-b14-3","8u141-b14-3ubuntu1","8u141-b14-3ubuntu3","8u161-b12-1ubuntu2","11.0.2+1-1~18.04.2"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenjfx-java","binary_version":"11.0.2+1-1~18.04.2"},{"binary_name":"libopenjfx-jni","binary_version":"11.0.2+1-1~18.04.2"},{"binary_version":"11.0.2+1-1~18.04.2","binary_name":"openjfx"},{"binary_name":"openjfx-source","binary_version":"11.0.2+1-1~18.04.2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91402.json"}},{"package":{"name":"openjfx","ecosystem":"Ubuntu:20.04:LTS","purl":"pkg:deb/ubuntu/openjfx?arch=source&distro=focal"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.2+1-1","11.0.2+1-2ubuntu1","11.0.7+0-2ubuntu1","11.0.7+0-2ubuntu2"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenjfx-java","binary_version":"11.0.7+0-2ubuntu2"},{"binary_name":"libopenjfx-jni","binary_version":"11.0.7+0-2ubuntu2"},{"binary_name":"openjfx","binary_version":"11.0.7+0-2ubuntu2"},{"binary_name":"openjfx-source","binary_version":"11.0.7+0-2ubuntu2"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91402.json"}},{"package":{"name":"openjfx","ecosystem":"Ubuntu:22.04:LTS","purl":"pkg:deb/ubuntu/openjfx?arch=source&distro=jammy"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.11+0-1"],"ecosystem_specific":{"binaries":[{"binary_version":"11.0.11+0-1","binary_name":"libopenjfx-java"},{"binary_version":"11.0.11+0-1","binary_name":"libopenjfx-jni"},{"binary_name":"openjfx","binary_version":"11.0.11+0-1"},{"binary_version":"11.0.11+0-1","binary_name":"openjfx-source"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91402.json"}},{"package":{"name":"openjfx","ecosystem":"Ubuntu:24.04:LTS","purl":"pkg:deb/ubuntu/openjfx?arch=source&distro=noble"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.11+1-3.1","11.0.11+1-3.1ubuntu1","11.0.11+1-3.1ubuntu5"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenjfx-java","binary_version":"11.0.11+1-3.1ubuntu5"},{"binary_name":"libopenjfx-jni","binary_version":"11.0.11+1-3.1ubuntu5"},{"binary_version":"11.0.11+1-3.1ubuntu5","binary_name":"openjfx"},{"binary_version":"11.0.11+1-3.1ubuntu5","binary_name":"openjfx-source"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91402.json"}},{"package":{"name":"openjfx","ecosystem":"Ubuntu:26.10","purl":"pkg:deb/ubuntu/openjfx?arch=source&distro=stonking"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.11+1-7build1"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenjfx-java","binary_version":"11.0.11+1-7build1"},{"binary_version":"11.0.11+1-7build1","binary_name":"libopenjfx-jni"},{"binary_version":"11.0.11+1-7build1","binary_name":"openjfx"},{"binary_name":"openjfx-source","binary_version":"11.0.11+1-7build1"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91402.json"}},{"package":{"name":"openjfx","ecosystem":"Ubuntu:26.04:LTS","purl":"pkg:deb/ubuntu/openjfx?arch=source&distro=resolute"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["11.0.11+1-7","11.0.11+1-7build1"],"ecosystem_specific":{"binaries":[{"binary_name":"libopenjfx-java","binary_version":"11.0.11+1-7build1"},{"binary_version":"11.0.11+1-7build1","binary_name":"libopenjfx-jni"},{"binary_name":"openjfx","binary_version":"11.0.11+1-7build1"},{"binary_version":"11.0.11+1-7build1","binary_name":"openjfx-source"}]},"database_specific":{"source":"https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2026/UBUNTU-CVE-2026-91402.json"}}],"schema_version":"1.9.0","severity":[{"type":"Ubuntu","score":"medium"}]}