Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Several critical security vulnerabilities were identified in various versions of OpenJDK, affecting Ubuntu 25.10 and its derivatives. The issues include improper handling of encoded strings and XML External Entity (XEE) attacks, which could allow unauthenticated remote attackers to modify files or l...
CVE-2023-2861, published on December 6, 2023, details an improper access control issue in Qemu affecting special files. Additionally, CVE-2025-53066, published on October 21, 2025, highlights file permission modifications and improper access control with a CVSS base score of 7.1, impacting various s...
Multiple vulnerabilities have been identified in the java-1_8_0-ibm package, allowing unauthenticated attackers to gain unauthorized access to critical data. The issues include unauthorized creation, deletion, modification, and complete access to sensitive information. A patch has been released to a...
openSUSE released important security updates for java-21-openjdk, java-17-openjdk, and java-25-openjdk, addressing vulnerabilities identified by CVEs 2025-53066, 2025-61748, and 2025-53057. These updates include enhancements to path factories, string handling, and certificate handling, with patch in...
