Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Vulnerabilities have been identified in OpenJDK versions 8, 11, and 21, as well as CRaC JDK 21. The RMI component in these versions allows unauthenticated remote attackers to establish TCP endpoint connections without proper endpoint identification, potentially leading to sensitive information theft...
SUSE has issued important security updates for both java-25-openjdk and java-11-openjdk, addressing multiple vulnerabilities. The updates include fixes for components such as RMI, AWT, JavaFX, Networking, and Security, with specific CVE identifiers for each issue.
SUSE released an important security update for java-1_8_0-openj9, addressing four vulnerabilities in the Oracle Java SE components, including RMI, AWT, JavaFX, Networking, and Security. All identified CVEs were published on January 20, 2026, and the update aims to mitigate potential exploitation ris...
Tenable Research has identified a server-side request forgery (SSRF) vulnerability in Java's handling of client certificates during TLS handshakes. This vulnerability can be exploited in certain configurations to create a denial-of-service (DoS) condition, affecting systems that rely on the TLS prot...
