CVE-2022-21291

score

<0.1

cvss

5.3

epss

2.9%

published

2022-01-19

kev added

—

first seen

2026-10-21

Oracle Java SE (7u321, 8u311, 11.0.13, 17.0.1) and GraalVM Enterprise Edition (20.3.4, 21.3.0) contain a remote code execution caused by insecure API handling in the Hotspot component, letting unauthenticated attackers compromise the system via network protocols, exploit requires network access to vulnerable APIs.