{
  "fix": "Microsoft Build of OpenJDK with Hotspot 11 11.0.13.8",
  "url": "https://patchblox.com/security/fix/windows-app/microsoft.openjdk.11-11.0.13.8",
  "summary": "Microsoft Build of OpenJDK with Hotspot 11 11.0.13.8, released October 20, 2021, fixes 15 CVEs in Microsoft Build of OpenJDK with Hotspot 11. None of them is reported as exploited. Patch Radar priority: Routine. The latest Microsoft Build of OpenJDK with Hotspot 11 is 11.0.33.10, which also fixes every one of these CVEs.",
  "platform": "windows-app",
  "type": "app-version",
  "title": "Microsoft Build of OpenJDK with Hotspot 11 11.0.13.8",
  "released": "2021-10-20T00:00:00Z",
  "priority": "Routine",
  "priorityTier": 4,
  "priorityReason": "Closes 15 CVEs, none high severity",
  "supported": true,
  "cveCount": 15,
  "exploitedCveCount": 0,
  "kevCveCount": 0,
  "ransomwareCveCount": 0,
  "maxEpss": 0.08346,
  "maxCvss": 5.3,
  "appliesTo": [
    {
      "product": "Microsoft Build of OpenJDK with Hotspot 11",
      "productUrl": "https://patchblox.com/security/product/windows-app/microsoft-build-of-openjdk-with-hotspot-11",
      "fixedVersion": "11.0.13.8",
      "latestVersion": "11.0.33.10",
      "supported": true
    }
  ],
  "supersededBy": {
    "product": "Microsoft Build of OpenJDK with Hotspot 11",
    "latestVersion": "11.0.33.10",
    "productUrl": "https://patchblox.com/security/product/windows-app/microsoft-build-of-openjdk-with-hotspot-11"
  },
  "cves": [
    {
      "cveId": "CVE-2022-21293",
      "url": "https://patchblox.com/security/cve/CVE-2022-21293",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.08346,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21340",
      "url": "https://patchblox.com/security/cve/CVE-2022-21340",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.07748,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21283",
      "url": "https://patchblox.com/security/cve/CVE-2022-21283",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Protection Mechanism Failure",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.03782,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21341",
      "url": "https://patchblox.com/security/cve/CVE-2022-21341",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Deserialization of Untrusted Data",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.03765,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21248",
      "url": "https://patchblox.com/security/cve/CVE-2022-21248",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:\u2026",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.03763,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21360",
      "url": "https://patchblox.com/security/cve/CVE-2022-21360",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.03486,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21365",
      "url": "https://patchblox.com/security/cve/CVE-2022-21365",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component:\u2026",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.03486,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21299",
      "url": "https://patchblox.com/security/cve/CVE-2022-21299",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.03458,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21294",
      "url": "https://patchblox.com/security/cve/CVE-2022-21294",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Allocation of Resources Without Limits or Throttling",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.0335,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21366",
      "url": "https://patchblox.com/security/cve/CVE-2022-21366",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.03007,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21291",
      "url": "https://patchblox.com/security/cve/CVE-2022-21291",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Improper Access Control",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.02896,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21277",
      "url": "https://patchblox.com/security/cve/CVE-2022-21277",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Uncontrolled Resource Consumption",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.02889,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21282",
      "url": "https://patchblox.com/security/cve/CVE-2022-21282",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Improper Restriction of XML External Entity Reference",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.02877,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21296",
      "url": "https://patchblox.com/security/cve/CVE-2022-21296",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Exposure of Sensitive Information to an Unauthorized Actor",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.02825,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    },
    {
      "cveId": "CVE-2022-21305",
      "url": "https://patchblox.com/security/cve/CVE-2022-21305",
      "title": "Microsoft Build of OpenJDK with Hotspot 11: Improper Access Control",
      "priority": "Routine",
      "severity": "MODERATE",
      "cvss": 5.3,
      "epss": 0.02755,
      "kev": false,
      "ransomware": false,
      "exploited": false,
      "disclosed": false
    }
  ],
  "dataAsOf": "2026-11-11T13:47:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}