Multiple vulnerabilities in Oracle Java

Description

Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Denial of service vulnerability in JavaFX can be exploited to cause denial of service
2. A remote code execution vulnerability in JavaFX can be exploited remotely to execute arbitrary code
3. A remote code execution vulnerability in 2D can be exploited remotely to execute arbitrary code
4. Denial of service vulnerability in Compiler can be exploited to cause denial of service
5. Information disclosure vulnerability in JSSE can be exploited to obtain sensitive information
6. Information disclosure vulnerability in Networking can be exploited to obtain sensitive information
7. A remote code execution vulnerability in Install can be exploited remotely to execute arbitrary code
8. Denial of service vulnerability in Scripting can be exploited to cause denial of service

Fiches de renseignement originales

• Oracle Critical Patch Update Advisory – April 2025

Exploitation

Public exploits exist for this vulnerability.

Produits associés

• Oracle-Java-JRE-1.8.x

Liste CVE

• CVE-2025-27113
  critical
• CVE-2025-24855
  critical
• CVE-2025-30749
  critical
• CVE-2025-30752
  warning
• CVE-2025-30754
  warning
• CVE-2025-50059
  critical
• CVE-2025-50063
  high
• CVE-2025-50106
  critical
• CVE-2025-30761
  high

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com