CRaC JDK 17 — Cyber Threats, Attacks & Incidents

Threat entity extracted from intelligence sources

Frequency
3
occurrences
First Seen
December 1, 2025
Last Seen
May 28, 2026

CRaC JDK 17 is a technology platform tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed December 1, 2025; most recent activity May 28, 2026.

Related Threat Clusters

  • Multiple CRaC JDK and OpenJDK Vulnerabilities Discovered

    On May 28, 2026, Ubuntu published security notices for vulnerabilities in various Java Development Kits (JDKs). Discovered by Thomas Beckers, these vulnerabilities affect CRaC JDK 25, JDK 21, JDK 17, OpenJDK 11, and…

    8 articles · Updated May 28, 2026
  • Multiple OpenJDK Vulnerabilities Discovered in Ubuntu 25.10 and Derivatives

    Several critical security vulnerabilities were identified in various versions of OpenJDK, affecting Ubuntu 25.10 and its derivatives. The issues include improper handling of encoded strings and XML External Entity (XEE)…

    11 articles · Updated December 2, 2025
  • OpenJDK 21 and 25 Vulnerabilities Expose Sensitive Data Risks

    OpenJDK versions 21 and 25 have been found to contain vulnerabilities that allow unauthenticated remote attackers to potentially modify files or leak sensitive information. The issues were discovered in the Security…

    11 articles · Updated November 24, 2025

Recent Intelligence Reports

  • USN-8332-1: CRaC JDK 17 vulnerabilities — Ubuntu · May 28, 2026
  • Ubuntu 25.10 OpenJDK Critical Security Risks USN-7900-1 CVE-2025 — Linuxsecurity · December 2, 2025
  • USN-7900-1: CRaC JDK 17 vulnerabilities — Ubuntu · December 1, 2025

CVSS v3.1 Breakdown