Oracle Java SE
Oracle · current 26.0.2
The current version of Oracle Java SE is 26.0.2 (as of 21/07/2026). patchletter checks the official source daily and emails you every new release.
Actively exploited vulnerabilities
The US cybersecurity agency CISA lists these vulnerabilities in its catalog of Known Exploited Vulnerabilities. Check your version and patch or mitigate promptly.
- CVE-2012-0507Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
- CVE-2012-1723Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
- CVE-2012-4681Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution VulnerabilityRansomware
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
9.8 critical · over the network, without login · CISA deadline was 18 Apr 22
- CVE-2011-3544Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
- CVE-2015-2590Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
9.8 critical · over the network, without login · CISA deadline was 24 Mar 22
- CVE-2012-5076Oracle Java SE Sandbox Bypass Vulnerability
9.8 critical · over the network, without login · CISA deadline was 18 Apr 22
- CVE-2016-3427Oracle Java SE and JRockit Unspecified Vulnerability
9.8 critical · over the network, without login · CISA deadline was 2 Jun 23
- CVE-2015-4902Oracle Java SE Integrity Check Vulnerability
5.3 medium · over the network, without login · CISA deadline was 24 Mar 22
Source: CISA KEV. The CVE is matched to the product automatically — when in doubt, the linked NVD entry applies.
BSI security advisories
Advisories the German BSI (CERT-Bund) published for this product. Whether your version is affected is stated in the advisory itself.
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2026-2443 · 24 Aug
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2026-2897 · 24 Aug
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2026-1201 · 13 Aug
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2026-0164 · 20 Jul
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2025-2365 · 20 Jul
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2025-0815 · 10 Jun
- Oracle Java SE: Mehrere Schwachstellen
WID-SEC-W-2025-1569 · 26 May
Oracle Java SE at a glance
Oracle Java SE provides the runtime and development kit for Java applications. In companies it typically underpins line-of-business software, an application server, or a client for ERP, banking or public-administration systems. Administrators manage the installation on servers and workstations and have to keep it current, because the runtime executes third-party code.
Oracle ships updates on a fixed quarterly cadence as Critical Patch Updates, and publishes new feature releases twice a year. Selected branches are designated long-term support and receive fixes for years, while the remaining ones fall out of support quickly. The lifecycle of these branches is publicly documented and available in machine-readable form.
Points to watch when updating: several installations often coexist on one system, and older ones remain after an update and should be removed. Applications depend on JAVA_HOME, PATH and sometimes on a specific branch, so check the software vendor's support statement before switching. Also review the licence terms of the edition in use, as they differ between branches; builds of OpenJDK from other vendors are an alternative.
Support cycles (endoflife.date)
| Cycle | Latest version | Status |
|---|---|---|
| 26 | 26.0.2 | EOL in 22 days |
| 25LTS | 25.0.4 | EOL 30 Sept 30 |
| 24 | 24.0.2 | End of Life |
| 23 | 23.0.2 | End of Life |
| 22 | 22.0.2 | End of Life |
| 21LTS | 21.0.12 | EOL 30 Sept 28 |
| 20 | 20.0.2 | End of Life |
| 19 | 19.0.2 | End of Life |
Version history & changelog · as detected by patchletter
| Version | Channel | Date | Notes |
|---|---|---|---|
| 26.0.2 | STABLE | 21/07/2026 | Release notes → |
Frequently asked questions
- What is the latest version of Oracle Java SE?
- Oracle Java SE 26.0.2, released 21/07/2026. patchletter checks the vendor's official source daily for new releases.
- Where can I find the Oracle Java SE release notes?
- The version history above links to the vendor's official release notes where the vendor publishes them. patchletter deliberately stores no vendor full texts.
- How do I get notified about new Oracle Java SE updates?
- Free by email: patchletter reports every new release — instantly or bundled as a digest. Unsubscribe anytime with one click.
Never miss a Oracle Java SE update
We check the source daily and email you — instantly or as a digest. Free, one-click unsubscribe.
Watch Oracle Java SEEmbed this badge
Shows the current Oracle Java SE version and updates itself. Free to use, no account needed.
[](https://patchletter.com/en/software/oracle-java-se)https://patchletter.com/badge/oracle-java-se.svgAlso available: ?v=eol (end of support) and ?v=cve (actively exploited).
