CRaC JDK 21 is a technology platform tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed February 2, 2026; most recent activity May 28, 2026.
On May 28, 2026, Ubuntu published security notices for vulnerabilities in various Java Development Kits (JDKs). Discovered by Thomas Beckers, these vulnerabilities affect CRaC JDK 25, JDK 21, JDK 17, OpenJDK 11, and…
Vulnerabilities have been identified in OpenJDK versions 8, 11, and 21, as well as CRaC JDK 21. The RMI component in these versions allows unauthenticated remote attackers to establish TCP endpoint connections without…