Oracle Java SE Vulnerability Affects Multiple Versions, Including 8u391, 11.0.21, and 21.0.1

CVE-2024-20952

Summary

This vulnerability impacts Oracle Java SE and GraalVM products, allowing unauthenticated attackers with network access through various protocols to exploit critical weaknesses. It targets Java deployments, specifically those running sandboxed Java Web Start applications or applets that load untrusted code from the internet. Successful exploitation could lead to the unauthorized creation, deletion, or alteration of critical data. Notably, the vulnerability does not affect trusted Java deployments running on servers. Users are encouraged to update their systems to mitigate potential risks associated with this security issue.

References