Ubuntu OpenJDK 21 and 25 Vulnerabilities Expose Sensitive Data Risks
Article Content
Browse articles 
OpenJDK versions 21 and 25 have been found to contain vulnerabilities that allow unauthenticated remote attackers to potentially modify files or leak sensitive information. The issues were discovered in the Security component and the JAXP component, with specific vulnerabilities identified as CVE-2025-53057. Both versions are affected by improper handling of encoded strings and XML External Entity (XEE) attacks.
Ask AI about this cluster
Answers cite the sources they use
Updated 225d ago How this analysis works
More articles in this cluster (11)
Following this threat?
Track Ubuntu and CVE-2025-53057 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…