Multiple vulnerabilities in Oracle Java SE and GraalVM

Описание

Multiple vulnerabilities were found in Oracle Java SE and GraalVM. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service.

Below is a complete list of vulnerabilities:

1. Code execution vulnerability in JavaFX can be exploited to execute arbitrary code.
2. Elevation of privilege vulnerability in Node can be exploited remotely to gain privileges.
3. Information disclosure vulnerability in Compiler can be exploited to obtain sensitive information.
4. Denial of service vulnerability in Compiler can be exploited to cause denial of service.
5. Denial of service vulnerability in Concurrency can be exploited to cause denial of service.
6. Code execution vulnerability in Hotspot can be exploited to execute arbitrary code.
7. Code execution vulnerability in Networking can be exploited to execute arbitrary code.
8. Denial of service vulnerability in Hotspot can be exploited to cause denial of service.

Первичный источник обнаружения

• Oracle Critical Patch Update Advisory - April 2024
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• Oracle-Java-JRE-1.8.x

Список CVE

• CVE-2023-41993
  critical
• CVE-2024-21892
  critical
• CVE-2024-21004
  warning
• CVE-2024-20954
  warning
• CVE-2024-21098
  warning
• CVE-2024-21085
  warning
• CVE-2024-21003
  warning
• CVE-2024-21068
  warning
• CVE-2024-21012
  warning
• CVE-2024-21011
  warning
• CVE-2024-21002
  warning
• CVE-2024-21094
  warning
• CVE-2024-21005
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com