CVE-2022-21366

score

<0.1

cvss

5.3

epss

3.2%

published

2022-01-19

kev added

—

first seen

2026-10-21

Oracle Java SE (11.0.13, 17.0.1) and GraalVM Enterprise Edition (20.3.4, 21.3.0) contain a partial denial of service caused by an untrusted code loading vulnerability in ImageIO, letting unauthenticated remote attackers cause partial service disruption, exploit requires network access via multiple protocols.