CVE-2026-21932 | Oracle Java SE/GraalVM for JDK/GraalVM Enterprise Edition AWT/JavaFX Remote Code Execution (EUVD-2026-3577 / Nessus ID 294885)

A vulnerability marked as critical has been reported in Oracle Java SE, GraalVM for JDK and GraalVM Enterprise Edition. Affected by this vulnerability is an unknown functionality of the component AWT/JavaFX. Performing a manipulation results in Remote Code Execution. This vulnerability is known as CVE-2026-21932. Remote exploitation of the attack is possible. No exploit is available. It is suggested to upgrade the affected component.