Multiple vulnerabilities in Oracle Java SE and GraalVM

Descripción

Multiple vulnerabilities were found in Oracle Java SE and GraalVM. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. Code execution vulnerability in JavaFX can be exploited to execute arbitrary code.
2. Elevation of privilege vulnerability in Node can be exploited remotely to gain privileges.
3. Information disclosure vulnerability in Compiler can be exploited to obtain sensitive information.
4. Denial of service vulnerability in Compiler can be exploited to cause denial of service.
5. Denial of service vulnerability in Concurrency can be exploited to cause denial of service.
6. Code execution vulnerability in Hotspot can be exploited to execute arbitrary code.
7. Code execution vulnerability in Networking can be exploited to execute arbitrary code.
8. Denial of service vulnerability in Hotspot can be exploited to cause denial of service.

Notas informativas originales

• Oracle Critical Patch Update Advisory – April 2024

Explotación

Public exploits exist for this vulnerability.

Productos relacionados

• Oracle-Java-JRE-1.8.x

Lista CVE

• CVE-2023-41993
  critical
• CVE-2024-21892
  critical
• CVE-2024-21004
  warning
• CVE-2024-20954
  warning
• CVE-2024-21098
  warning
• CVE-2024-21085
  warning
• CVE-2024-21003
  warning
• CVE-2024-21068
  warning
• CVE-2024-21012
  warning
• CVE-2024-21011
  warning
• CVE-2024-21002
  warning
• CVE-2024-21094
  warning
• CVE-2024-21005
  warning

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com