VDB
GCVE-110-NCSC-2026-449
GCVE-110-NCSC-2026-449
Advisory PublishedCVSS 5.9/10
Multiple vulnerabilities including type confusion and memory release issues in libxml2 and a denial of service flaw in Oracle Java SE, JavaFX, and GraalVM Enterprise Edition can cause system crashes or hangs when processing crafted documents or running untrusted code.
Weaknesses (CWE)
CWE-843Access of Resource Using Incompatible Type ('Type Confusion')CWE-369Divide By ZeroCWE-863Incorrect AuthorizationCWE-416Use After Free
Risk Scores
CVSS 3.1
5.9/10
Medium · CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Oracle | vers:unknown/* | — | — |
Aliases
CVE-2026-101516CVE-2026-101737CVE-2026-43660CVE-2026-46470CVE-2026-6732CVE-2026-83374CVE-2026-83376CVE-2026-83378CVE-2026-83380CVE-2026-83381CVE-2026-83387CVE-2026-83395CVE-2026-83400CVE-2026-87255CVE-2026-87290CVE-2026-87291CVE-2026-87292CVE-2026-87293CVE-2026-87294CVE-2026-87367CVE-2026-91332CVE-2026-91333CVE-2026-91334CVE-2026-91335CVE-2026-91373CVE-2026-91374CVE-2026-91375CVE-2026-91379CVE-2026-91380CVE-2026-91381CVE-2026-91382CVE-2026-91385CVE-2026-91394CVE-2026-91395CVE-2026-91396CVE-2026-91397CVE-2026-91398CVE-2026-91400CVE-2026-91402CVE-2026-91409CVE-2026-91410CVE-2026-91411CVE-2026-91415CVE-2026-91417CVE-2026-91418CVE-2026-91451CVE-2026-91452CVE-2026-91453CVE-2026-91461CVE-2026-91462CVE-2026-91463CVE-2026-91464CVE-2026-91477CVE-2026-91484CVE-2026-91487
References
Browse GCVE Records
816 records in the GCVE database · Updated November 2, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.