DeutschShown in its original language — a full translation is planned for a future version.
Oracle Java SE: Mehrere Schwachstellen
view advisory published 2024-04-16
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
01
describes (13)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-21098US | — | — | ||
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Gra… | ||||
| CVE-2024-21094US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected… | ||||
| CVE-2024-21085US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE:… | ||||
| CVE-2024-21068US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected… | ||||
| CVE-2024-21012US | —OT elevated | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affec… | ||||
| CVE-2024-21011US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected… | ||||
| CVE-2024-21005US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u40… | ||||
| CVE-2024-21004US | —OT elevated | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u40… | ||||
| CVE-2024-21003US | — | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u40… | ||||
| CVE-2024-21002US | —OT elevated | — | ||
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX). Supported versions that are affected are Oracle Java SE: 8u40… | ||||
| CVE-2024-20954US | — | — | ||
Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Gra… | ||||
| CVE-2024-21892US | high7.8 | — | ||
On Linux, Node.js ignores certain environment variables if those may have been set by an unprivileged user while the process is running with elevated privileges with the only excep… | ||||
| CVE-2023-41993US | high8.8OT critical | KEV | ||
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that t… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:1815 vom 2024-04-17external
- Red Hat Security Advisory RHSA-2024:1816 vom 2024-04-17external
- Red Hat Security Advisory RHSA-2024:1817 vom 2024-04-16external
- Red Hat Security Advisory RHSA-2024:1818 vom 2024-04-18external
- Red Hat Security Advisory RHSA-2024:1819 vom 2024-04-18external
- Red Hat Security Advisory RHSA-2024:1820 vom 2024-04-17external
- Red Hat Security Advisory RHSA-2024:1821 vom 2024-04-22external
- Red Hat Security Advisory RHSA-2024:1822 vom 2024-04-22external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan