Multiple vulnerabilities in Oracle Java

Описание

Multiple vulnerabilities were found in Oracle Java. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Heap buffer overflow vulnerability can be exploited to cause denial of service.
2. Information disclosure vulnerability in Cloud Clipboard for Windows can be exploited to obtain sensitive information.
3. Out of bounds memory read vulnerability can be exploited to cause denial of service.
4. Type confusion vulnerability can be exploited to cause denial of service.
5. Denial of service vulnerability can be exploited remotely to cause denial of service.
6. A remote code execution vulnerability can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• Oracle Critical Patch Update Advisory — April 2025

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• Oracle-Java-JRE-1.8.x

Список CVE

• CVE-2025-6021
  critical
• CVE-2025-6052
  critical
• CVE-2025-7425
  critical
• CVE-2025-47219
  critical
• CVE-2025-43368
  warning
• CVE-2026-21925
  warning
• CVE-2026-21932
  high
• CVE-2026-21933
  high
• CVE-2026-21945
  critical
• CVE-2026-21947
  warning

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com