Openjdk vulnerabilities

3 known vulnerabilities in Openjdk from Oracle. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Java SE JDK and JRE: Improper Access Control

  CVE-2024-20952Jan 16, 2024Oracle

  Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM

• 7.5 High severity

  Apache Xalan-J: Incorrect Conversion between Numeric Types

  CVE-2022-34169Jul 19, 2022ApacheEPSS 81.8%

  The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are rec

• 5.0 Medium severity

  Oracle JRE Sandbox Bypass Exploited

  CVE-2013-0431Jan 31, 2013OracleEPSS 90.1%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a