Critical Vulnerability in Oracle Java SE and GraalVM Products

CVE-2025-21502

Summary

A vulnerability exists in Oracle Java SE and GraalVM products that allows unauthenticated attackers with network access to exploit the Hotspot component. This can lead to unauthorized modifications of data, including updates, inserts, deletions, and unauthorized read access. Notably, the flaw can be exploited through APIs, making it particularly concerning for Java deployments that utilize untrusted code via sandboxed applications. Attackers can leverage this weakness to compromise the integrity and confidentiality of sensitive data within affected Oracle products.

References