Vulnerability in Oracle Java SE and GraalVM Products

CVE-2024-21208

Summary

This vulnerability allows unauthenticated attackers with network access to compromise specific versions of Oracle Java SE and GraalVM products through multiple protocols. It primarily affects Java deployments in client environments where untrusted code may be loaded, particularly in sandboxed Java Web Start applications or applets. Successful exploitation may grant attackers unauthorized partial denial of service capabilities, impacting availability. The risk is notably relevant for users operating Java applications that rely on the security features of the Java sandbox, whereas environments running solely trusted code remain unaffected.

References