Multiple vulnerabilities in Oracle Java

Description

Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Heap buffer overflow vulnerability can be exploited to cause denial of service.
2. Information disclosure vulnerability in Cloud Clipboard for Windows can be exploited to obtain sensitive information.
3. Out of bounds memory read vulnerability can be exploited to cause denial of service.
4. Type confusion vulnerability can be exploited to cause denial of service.
5. Denial of service vulnerability can be exploited remotely to cause denial of service.
6. A remote code execution vulnerability can be exploited remotely to execute arbitrary code.

Original advisories

• Oracle Critical Patch Update Advisory – April 2025

Exploitation

Public exploits exist for this vulnerability.

Related products

• Oracle-Java-JRE-1.8.x

CVE list

• CVE-2025-6021
  critical
• CVE-2025-6052
  critical
• CVE-2025-7425
  critical
• CVE-2025-47219
  critical
• CVE-2025-43368
  warning
• CVE-2026-21925
  warning
• CVE-2026-21932
  high
• CVE-2026-21933
  high
• CVE-2026-21945
  critical
• CVE-2026-21947
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com