CVE-2024-21094

Summary

CVE-2024-21094 is a newly disclosed vulnerability affecting multiple versions of Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition. This issue, located in the Hotspot component, is classified as difficult to exploit and allows unauthenticated attackers to compromise these Java products via various network protocols. Successful exploitation may result in unauthorized access to some data, enabling attackers to update, insert, or delete sensitive information. This vulnerability can be exploited using APIs in the affected components, and is particularly relevant to Java deployments relying on the sandbox for security, such as Java Web Start applications or applets that load and run untrusted code. The CVSS Base Score is 3.7 for integrity impacts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.