JavaFX Vulnerability in Oracle Java SE and GraalVM Enterprise Edition

CVE-2024-21005

Summary

A vulnerability affects Oracle Java SE and GraalVM Enterprise Edition, specifically within JavaFX. This issue allows an unauthenticated attacker with network access to exploit the vulnerability through various protocols. Successful exploitation necessitates human interaction from a third party. When exploited, the vulnerability may lead to unauthorized updates, insertion, or deletion of data within accessible Oracle Java SE and GraalVM environments. It primarily impacts Java deployments in sandboxed settings, such as Java Web Start applications or applets running untrusted code from the internet. It does not impact server deployments that only run trusted code provided by an administrator.

References