USN-7255-1
openjdk-23 vulnerability
It was discovered that the Hotspot component of OpenJDK 23 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.
What each source reports
OSV No score
openjdk-23 vulnerability
It was discovered that the Hotspot component of OpenJDK 23 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information.
- Record
USN-7255-1- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
openjdk-23Ubuntu:24.10 |
before 23.0.2+7-1ubuntu1~24.10, plus listed versions 23~20ea-123~28ea-1ubuntu123~33ea-123~34ea-123~36ea-123~37ea-123+37-123.0.1+11-1ubuntu1~24.10.1 |
23.0.2+7-1ubuntu1~24.10 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
USN-7255-1 is a vulnerability with no CVSS score yet in openjdk-23, published February 5, 2025. No source lists public exploit code. Fixed in openjdk-23 23.0.2+7-1ubuntu1~24.10.