The current version of Oracle Java SE is 27 (as of 15/09/2026). patchletter checks the official source daily and emails you new releases.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. What CISA does not carry does not appear in this list — even where it is being exploited.
- CVE-2012-0507Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
- CVE-2012-1723Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
- CVE-2012-4681Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
9.8 critical · over the network, without login · CISA deadline was 18 Apr 22
- CVE-2011-3544Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
- CVE-2015-2590Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
- CVE-2012-5076Oracle Java SE Sandbox Bypass Vulnerability
9.8 critical · over the network, without login · CISA deadline was 18 Apr 22
- CVE-2016-3427Oracle Java SE and JRockit Unspecified Vulnerability
9.8 critical · over the network, without login · CISA deadline was 2 Jun 23
- CVE-2015-4902Oracle Java SE Integrity Check Vulnerability
5.3 medium · over the network, without login · CISA deadline was 24 Mar 22
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2026-2443 · 9 Oct
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2026-2897 · 6 Oct
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2026-1201 · 29 Sept
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2026-0164 · 4 Sept
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2025-2365 · 4 Sept
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2025-0815 · 10 Jun
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2025-1569 · 26 May
Oracle Java SE at a glance
Oracle Java SE provides the runtime and development kit for Java applications. In companies it typically underpins line-of-business software, an application server, or a client for ERP, banking or public-administration systems. Administrators manage the installation on servers and workstations and have to keep it current, because the runtime executes third-party code.
Oracle ships updates on a fixed quarterly cadence as Critical Patch Updates, and publishes new feature releases twice a year. Selected branches are designated long-term support and receive fixes for years, while the remaining ones fall out of support quickly. The lifecycle of these branches is publicly documented and available in machine-readable form.
Points to watch when updating: several installations often coexist on one system, and older ones remain after an update and should be removed. Applications depend on JAVA_HOME, PATH and sometimes on a specific branch, so check the software vendor's support statement before switching. Also review the licence terms of the edition in use, as they differ between branches; builds of OpenJDK from other vendors are an alternative.
Support cycles (endoflife.date)
| Cycle | Latest version | Status |
|---|---|---|
| 27 | 27 | EOL 31 Mar 27 |
| 26 | 26.0.2.1 | End of Life |
| 25LTS | 25.0.4.1 | EOL 30 Sept 30 |
| 24 | 24.0.2 | End of Life |
| 23 | 23.0.2 | End of Life |
| 22 | 22.0.2 | End of Life |
| 21LTS | 21.0.12.1 | EOL 30 Sept 28 |
| 20 | 20.0.2 | End of Life |
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 27 | STABLE | 15/09/2026 | Release notes → |
| 26.0.2.1 | STABLE | 18/08/2026 | Release notes → |
| 26.0.2 | STABLE | 21/07/2026 | Release notes → |
Frequently asked questions
- What is the latest version of Oracle Java SE?
- Oracle Java SE 27, released 15/09/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the Oracle Java SE release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new Oracle Java SE updates?
- Tick Oracle Java SE off in the catalogue and leave your address. From then on new versions go out by email — one at a time, or bundled in the daily or weekly digest.
An email as soon as a new Oracle Java SE version ships
We reconcile the vendor source daily. When a new version appears, it lands in your inbox right away or bundled as a digest. The update email is free and ends with one click. Alerts about vulnerabilities and end of support are part of patchletter Pro.
Embed this badge
The badge shows the current Oracle Java SE version and keeps it up to date. Anyone may embed it, no account needed.
[](https://patchletter.com/en/software/oracle-java-se)https://patchletter.com/badge/oracle-java-se.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
