JavaFX Vulnerability in Oracle Java SE and GraalVM Enterprise Edition

CVE-2024-21004

Summary

A vulnerability exists in the Oracle Java SE and Oracle GraalVM Enterprise Edition, specifically affecting the JavaFX component. This vulnerability enables an unauthenticated attacker with logon access to the environment where these products execute to compromise their security. Successful exploitation typically requires human interaction from an individual other than the attacker. This vulnerability can lead to unauthorized operations, such as update, insert, or delete actions on data accessible to Oracle Java SE and Oracle GraalVM Enterprise Edition. It is important to note that this vulnerability primarily impacts Java deployments running sandboxed Java Web Start applications or applets that utilize untrusted code, not those running trusted code installed by an administrator.

References