Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Several critical security vulnerabilities were identified in various versions of OpenJDK, affecting Ubuntu 25.10 and its derivatives. The issues include improper handling of encoded strings and XML External Entity (XEE) attacks, which could allow unauthenticated remote attackers to modify files or l...
Multiple vulnerabilities have been identified in the java-1_8_0-ibm package, allowing unauthenticated attackers to gain unauthorized access to critical data. The issues include unauthorized creation, deletion, modification, and complete access to sensitive information. A patch has been released to a...
openSUSE released important security updates for java-21-openjdk, java-17-openjdk, and java-25-openjdk, addressing vulnerabilities identified by CVEs 2025-53066, 2025-61748, and 2025-53057. These updates include enhancements to path factories, string handling, and certificate handling, with patch in...
OpenJDK versions 21 and 25 have been found to contain vulnerabilities that allow unauthenticated remote attackers to potentially modify files or leak sensitive information. The issues were discovered in the Security component and the JAXP component, with specific vulnerabilities identified as CVE-20...
