Should you update to Java 21.0.12?
No: install Java 21.0.13 instead. Java 21.0.12 is a security update Oracle released on 21 Jul 2026 for Windows and Mac. It fixes 9 security flaws, 0 rated critical and 2 high by Oracle.[1] None of them is known to be used in attacks.
It has since been replaced by Java 21.0.13, released 20 Oct 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Java 21.0.13 instead. Java 21.0.13 came out on 20 Oct 2026 and includes every fix in Java 21.0.12, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Java 21.0.12 still safe?
Not any more. Java 21.0.13 fixes 38 security flaws that Java 21.0.12 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from java.com, or Java’s own updater on Windows, never from a link in an email, text or pop-up.
What it fixes
Oracle lists 9 security flaws, 0 rated critical and 2 high by Oracle.[1] The 2 critical and high ones are:
| Flaw | Severity | What Oracle calls it |
|---|---|---|
CVE-2026-41254 | High | Java SE 2D (Little CMS) |
CVE-2026-47063 | High | Java SE Libraries |
How to update, and how long it takes
About five minutes. Close your browser and any Java programs first. If nothing you use needs Java, uninstalling it is safer still.
- On Windows, open the Start menu and search for “Check For Updates” (Java’s own updater).Click Update Now and follow the steps.
- On a Mac, or for a Java development kit (JDK),download the newest version of the same Java number from java.com or oracle.com/java and install it.
To check it worked: On Windows, Settings → Apps → Installed apps shows “Java 8 Update 511” or the JDK’s version. On a Mac, open Terminal and type java -version. It should say 21.0.13 or later.
Older devices
The same day, Oracle released Java 8u501 (17 security flaws), Java 26.0.2 (9 security flaws), Java 25.0.4 (9 security flaws), Java 17.0.20 (9 security flaws) and Java 11.0.32 (11 security flaws) for devices that stay on an older version. Each fixes the same holes where they apply.
Before and after
- After: Java 21.0.13, 20 Oct 2026, 38 security flaws
- Java updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Oracle. “Oracle Critical Patch Update Jul 2026”, 21 Jul 2026.