CRaC JDK 25 is a technology platform tracked across 3 threat clusters and 3 intelligence report mentions on ThreatCluster. First observed December 1, 2025; most recent activity February 3, 2026.
Vulnerabilities have been identified in OpenJDK versions 8, 11, and 21, as well as CRaC JDK 21. The RMI component in these versions allows unauthenticated remote attackers to establish TCP endpoint connections without…
Several critical security vulnerabilities were identified in various versions of OpenJDK, affecting Ubuntu 25.10 and its derivatives. The issues include improper handling of encoded strings and XML External Entity (XEE)…
OpenJDK versions 21 and 25 have been found to contain vulnerabilities that allow unauthenticated remote attackers to potentially modify files or leak sensitive information. The issues were discovered in the Security…