CVE-2026-47013: Medium severity Oracle Java SE vulnerability
Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u491. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle Java SEto a version that resolves this vulnerability.Fixed in 8u491 - Compensating control
Mitigate partial denial of service risk by preventing untrusted code from running in sandboxed Java Web Start applications or sandboxed Java applets that load code from the internet.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-47013?
The severity of CVE-2026-47013 is rated as medium with a score of 5.3.
How do I fix CVE-2026-47013?
To fix CVE-2026-47013, upgrade to the latest version of Oracle Java SE beyond 8u491.
What component is affected in CVE-2026-47013?
CVE-2026-47013 affects the JavaFX component of Oracle Java SE.
Who can exploit CVE-2026-47013?
An unauthenticated attacker with network access can exploit CVE-2026-47013.
What are the potential consequences of exploiting CVE-2026-47013?
Successful exploitation of CVE-2026-47013 can lead to the compromise of Oracle Java SE.