JavaFX Vulnerability in Oracle Java SE Affects User Security

CVE-2026-60164

What is CVE-2026-60164?

A security flaw exists in Oracle Java SE's JavaFX component that may be exploited by unauthenticated attackers with network access. This vulnerability is particularly concerning in environments where untrusted code is run through sandboxed applications, such as Java Web Start or applets. Attackers can potentially gain unauthorized read access to specific data within the Java environment, particularly when users inadvertently trigger the exploit through human interaction. Notably, this issue does not pertain to environments where only trusted code is executed, such as typical server deployments.

References