Multiple vulnerabilities in Oracle Java SE and GraalVM

Description

Multiple vulnerabilities were found in Oracle Java SE and GraalVM. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. Code execution vulnerability in JavaFX can be exploited to execute arbitrary code.
2. Elevation of privilege vulnerability in Node can be exploited remotely to gain privileges.
3. Information disclosure vulnerability in Compiler can be exploited to obtain sensitive information.
4. Denial of service vulnerability in Compiler can be exploited to cause denial of service.
5. Denial of service vulnerability in Concurrency can be exploited to cause denial of service.
6. Code execution vulnerability in Hotspot can be exploited to execute arbitrary code.
7. Code execution vulnerability in Networking can be exploited to execute arbitrary code.
8. Denial of service vulnerability in Hotspot can be exploited to cause denial of service.

Original advisories

• Oracle Critical Patch Update Advisory – April 2024

Exploitation

Public exploits exist for this vulnerability.

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

CVE list

• CVE-2023-41993
  critical
• CVE-2024-21892
  critical
• CVE-2024-21004
  warning
• CVE-2024-20954
  warning
• CVE-2024-21098
  warning
• CVE-2024-21085
  warning
• CVE-2024-21003
  warning
• CVE-2024-21068
  warning
• CVE-2024-21012
  warning
• CVE-2024-21011
  warning
• CVE-2024-21002
  warning
• CVE-2024-21094
  warning
• CVE-2024-21005
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com