Multiple OpenJDK Vulnerabilities Discovered in Ubuntu 25.10 and Derivatives

Multiple OpenJDK Vulnerabilities Discovered in Ubuntu 25.10 and Derivatives

First seen 2 Dec 2025, 18:33 UTC •UbuntuLinuxsecurity •57.6

Article Content

Browse articles
ThreatCluster

Several critical security vulnerabilities were identified in various versions of OpenJDK, affecting Ubuntu 25.10 and its derivatives. The issues include improper handling of encoded strings and XML External Entity (XEE) attacks, which could allow unauthenticated remote attackers to modify files or leak sensitive information. Key affected versions include OpenJDK 8, 11, 17, 21, and 25.

Ask AI about this cluster

How this analysis works

Extracted Entities

1 / 2