Frequency
3
occurrences
First Seen
December 1, 2025
Last Seen
February 3, 2026
Related Threat Clusters
-
Multiple OpenJDK Versions Exposed to Remote Information Theft Vulnerabilities
Vulnerabilities have been identified in OpenJDK versions 8, 11, and 21, as well as CRaC JDK 21. The RMI component in these versions allows unauthenticated remote attackers to establish TCP endpoint connections without…
16 articles · Updated February 2, 2026 -
Multiple OpenJDK Vulnerabilities Discovered in Ubuntu 25.10 and Derivatives
Several critical security vulnerabilities were identified in various versions of OpenJDK, affecting Ubuntu 25.10 and its derivatives. The issues include improper handling of encoded strings and XML External Entity (XEE)…
11 articles · Updated December 2, 2025 -
OpenJDK 21 and 25 Vulnerabilities Expose Sensitive Data Risks
OpenJDK versions 21 and 25 have been found to contain vulnerabilities that allow unauthenticated remote attackers to potentially modify files or leak sensitive information. The issues were discovered in the Security…
11 articles · Updated November 24, 2025
Recent Intelligence Reports
- Ubuntu 25.10 OpenJDK 25 Critical RCE Information Disclosure 7996 — Linuxsecurity · February 3, 2026
- USN-7996-1: CRaC JDK 25 vulnerabilities — Ubuntu · February 2, 2026
- USN-7902-1: CRaC JDK 25 vulnerabilities — Ubuntu · December 1, 2025