CVE-2026-47013

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u491

Description An issue exists in the JavaFX component that allows an unauthenticated attacker with network access via multiple protocols to compromise the system. This can result in a partial denial of service (partial DOS), which is a condition where the system remains operational but some of its functions are unavailable. The flaw can be exploited through APIs in the JavaFX component, such as via a web service providing data to these APIs. It also affects Java deployments that run untrusted code within a sandbox, such as Java Web Start applications or Java applets, which rely on the Java sandbox for security.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.