{"id":"CVE-2023-42950","aliases":["ALSA-2024:9144","ALSA-2024:9636","BIT-java-2023-42950","BIT-java-min-2023-42950","BIT-jre-2023-42950","CLSA-2025-1751894976","DEBIAN-CVE-2023-42950","DSA-5684-1","EUVD-2023-47371","GHSA-6cvp-282g-6jp8","MGASA-2024-0148","OESA-2024-2485","OESA-2024-2486","OESA-2024-2487","OESA-2024-2488","OESA-2024-2489","RHSA-2024:9144","RHSA-2024:9636","RHSA-2025:10364","SUSE-SU-2024:1269-1","SUSE-SU-2024:1270-1","SUSE-SU-2024:1293-1","SUSE-SU-2024:1944-1","SUSE-SU-2024:1976-1","UBUNTU-CVE-2023-42950","USN-6732-1"],"status":"published","title":"A use after free issue was addressed with improved memory management. This issue is fixed in...","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.01069,"percentile":0.65257,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-416"],"published":"2024-03-28T15:39:16Z","modified":"2026-11-02T09:43:04Z","fixes":[{"ecosystem":"Bitnami","package":"java","fixed_in":["1.8.0","8.0.431"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"java-min","fixed_in":["1.8.0","8.0.431"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"jre","fixed_in":["1.8.0","8.0.431"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"webkit2gtk","fixed_in":["2.44.1-1~deb12u1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.44.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.44.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"wpewebkit","fixed_in":["2.44.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"wpewebkit","fixed_in":["2.44.1-1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","fixed_in":["2.44.0-0ubuntu0.22.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.3-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.3-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.3-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:9","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.3-2.el9"}]}],"bundled":4},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"AlmaLinux:8","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Bitnami","package":"java","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.431"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"java-min","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.431"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"jre","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.8.0"},{"introduced":"1.9.0"},{"fixed":"8.0.431"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.4-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.4-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.4-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.4-1.el9.tuxcare.els1"}]}],"bundled":4},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.1-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1~deb11u1"]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.38.6-1","2.39.91-1","2.40.0-1","2.40.1-1","2.40.2-1","2.40.2-2","2.40.3-1","2.40.4-1","2.40.5-1","2.42.0-1","2.42.1-1","2.42.2-1","2.42.3-1","2.42.4-1","2.42.5-1","2.42.5-1.1","2.42.5-1.1~exp1","2.42.5-1.2","2.42.5-2~exp","2.44.1-1","2.44.2-1","2.44.2-2","2.44.3-1","2.44.4-1","2.46.1-1","2.46.2-1","2.46.3-1","2.46.4-1","2.46.5-1","2.46.6-1","2.48.0-1","2.48.1-1","2.48.1-2","2.48.2-1","2.48.3-1","2.48.5-1","2.48.6-1","2.48.6-2","2.50.0-1","2.50.0-2","2.50.1-1","2.50.2-1","2.50.3-1","2.50.4-1","2.50.5-1","2.50.6-1","2.52.0-1","2.52.1-1","2.52.2-1","2.52.2-2","2.52.3-1","2.52.4-1","2.52.5-1","2.52.6-1","2.54.0-1","2.54.0-2","2.54.1-1","2.54.2-1"]},{"source":"osv","ecosystem":"Debian:13","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.1-1~deb11u1"}]}],"versions":["2.32.3-1","2.32.4-1","2.32.4-1~deb10u1","2.32.4-1~deb11u1","2.33.1-1","2.33.2-1","2.33.3-1","2.33.90-1","2.33.91-1","2.34.0-1","2.34.0-1~bpo11+1","2.34.1-1","2.34.1-1~deb10u1","2.34.1-1~deb11u1","2.34.2-1","2.34.2-1~bpo11+1","2.34.3-1","2.34.3-1~deb10u1","2.34.3-1~deb11u1","2.34.4-1","2.34.4-1~deb10u1","2.34.4-1~deb11u1","2.34.5-1","2.34.6-1","2.34.6-1~deb10u1","2.34.6-1~deb11u1","2.35.1-1","2.35.2-1","2.35.3-1","2.35.90-1","2.36.0-1","2.36.0-2","2.36.0-3","2.36.0-3~deb10u1","2.36.0-3~deb11u1","2.36.1-1","2.36.2-1","2.36.3-1","2.36.3-1~deb10u1","2.36.3-1~deb11u1","2.36.4-1","2.36.4-1~deb10u1","2.36.4-1~deb11u1","2.36.6-1","2.36.6-1~deb10u1","2.36.6-1~deb11u1","2.36.7-1","2.36.7-1~deb10u1","2.36.7-1~deb11u1","2.37.1-1","2.37.1-2","2.37.90-1","2.37.91-1","2.38.0-1","2.38.0-1~deb10u1","2.38.0-1~deb11u1","2.38.0-2","2.38.0-3","2.38.1-1","2.38.2-1","2.38.2-1~deb10u1","2.38.2-1~deb11u1","2.38.3-1","2.38.3-1~deb10u1","2.38.3-1~deb11u1","2.38.4-1","2.38.4-2","2.38.4-2~deb10u1","2.38.4-2~deb11u1","2.38.5-1","2.38.5-1+m68k","2.38.5-1~deb10u1","2.38.5-1~deb11u1","2.39.1-1","2.39.2-1","2.39.3-1","2.39.4-1","2.39.5-1","2.39.7-1","2.39.90-1","2.39.91-1","2.40.0-1","2.40.0-2","2.40.0-3","2.40.1-1","2.40.1-1~deb11u1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2"],"bundled":8},{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.1-1~deb12u1"}]}],"versions":["2.40.1-1","2.40.2-1","2.40.2-1~deb11u1","2.40.2-1~deb12u1","2.40.3-1","2.40.3-2","2.40.3-2~deb11u1","2.40.3-2~deb11u2","2.40.3-2~deb12u1","2.40.3-2~deb12u2","2.40.4-1","2.40.5-1","2.40.5-1~deb11u1","2.40.5-1~deb12u1","2.41.4-1","2.41.5-1","2.41.6-1","2.41.90-1","2.41.91-1","2.41.91-2","2.41.92-1","2.42.0-1","2.42.0-1~bpo12+1","2.42.1-1","2.42.1-1~bpo12+1","2.42.1-1~deb11u1","2.42.1-1~deb11u2","2.42.1-1~deb12u1","2.42.1-2","2.42.2-1","2.42.2-1~deb11u1","2.42.2-1~deb12u1","2.42.3-1","2.42.3-1~deb11u1","2.42.3-1~deb12u1","2.42.4-1","2.42.4-1~deb11u1","2.42.4-1~deb12u1","2.42.5-1","2.42.5-1~deb11u1","2.42.5-1~deb12u1","2.42.5-2","2.43.1-1","2.43.2-1","2.43.3-1","2.43.4-1","2.43.4-2","2.44.0-1","2.44.0-2","2.44.1-1~deb11u1"],"bundled":8},{"source":"osv","ecosystem":"Mageia:9","package":"webkit2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.1-1.mga9"}]}],"bundled":33},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2203sp3"}]}],"bundled":43},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2003sp4"}]}],"bundled":43},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2203sp1"}]}],"bundled":41},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2403"}]}],"bundled":43},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"openjdk-latest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"java-latest-openjdk-23.0.1.11-1.oe2203sp4"}]}],"bundled":43},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.44.3-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.44.3-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.44.3-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.44.3-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.44.3-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.44.3-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.44.3-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.44.3-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:9::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.44.3-2.el9"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"webkit2gtk3-jsc-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.46.3-1.el8_10"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.3-2.el7_9"}]}],"bundled":230},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.3-2.el7_9"}]}],"bundled":230},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.3-2.el7_9"}]}],"bundled":230},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.3-2.el7_9"}]}],"bundled":230},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-jsc-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.3-2.el7_9"}]}],"bundled":230},{"source":"osv","ecosystem":"Red Hat:rhel_els:7","package":"webkitgtk4-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.48.3-2.el7_9"}]}],"bundled":230},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150200.107.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-150400.4.78.1"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-4.3.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-4.3.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-4.3.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-4.3.2"}]}],"bundled":8},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-150600.12.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-150600.12.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15 SP6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-150600.12.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-150600.12.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-150600.12.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk3-soup2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-150600.12.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"webkit2gtk4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-150600.12.3.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-4.7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-4.7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-4.7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP5","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.2-4.7.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.1","2.22.2-0ubuntu0.18.04.2","2.22.4-0ubuntu0.18.04.1","2.22.5-0ubuntu0.18.04.1","2.22.6-0ubuntu0.18.04.1","2.24.1-0ubuntu0.18.04.1","2.24.2-0ubuntu0.18.04.1","2.24.4-0ubuntu0.18.04.1","2.26.1-0ubuntu0.18.04.1","2.26.2-0ubuntu0.18.04.1","2.26.3-0ubuntu0.18.04.1","2.26.4-0ubuntu0.18.04.1","2.28.0-0ubuntu0.18.04.3","2.28.1-0ubuntu0.18.04.1","2.28.2-0ubuntu0.18.04.1","2.28.3-0ubuntu0.18.04.1","2.28.4-0ubuntu0.18.04.1","2.30.3-0ubuntu0.18.04.1","2.30.5-0ubuntu0.18.04.1","2.30.6-0ubuntu0.18.04.1","2.32.0-0ubuntu0.18.04.1","2.32.3-0ubuntu0.18.04.1","2.32.4-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.1-3","2.26.2-1","2.26.3-1ubuntu2","2.26.4-1ubuntu1","2.28.0-1ubuntu2","2.28.1-1","2.28.2-0ubuntu0.20.04.1","2.28.3-0ubuntu0.20.04.1","2.28.4-0ubuntu0.20.04.1","2.30.3-0ubuntu0.20.04.1","2.30.5-0ubuntu0.20.04.1","2.30.6-0ubuntu0.20.04.1","2.32.0-0ubuntu0.20.04.1","2.32.3-0ubuntu0.20.04.1","2.32.4-0ubuntu0.20.04.1","2.34.1-0ubuntu0.20.04.1","2.34.3-0ubuntu0.20.04.1","2.34.4-0ubuntu0.20.04.1","2.34.6-0ubuntu0.20.04.1","2.36.0-0ubuntu0.20.04.3","2.36.2-0ubuntu0.20.04.1","2.36.3-0ubuntu0.20.04.1","2.36.4-0ubuntu0.20.04.1","2.36.6-0ubuntu0.20.04.1","2.36.7-0ubuntu0.20.04.1","2.36.8-0ubuntu0.20.04.1","2.38.2-0ubuntu0.20.04.1","2.38.3-0ubuntu0.20.04.1","2.38.4-0ubuntu0.20.04.2","2.38.5-0ubuntu0.20.04.1","2.38.6-0ubuntu0.20.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.26.3-1","2.26.4-1","2.26.4-1build1","2.28.0-1","2.28.1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-0ubuntu0.22.04.1"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wpewebkit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.32.4-1","2.34.1-1","2.34.2-1","2.34.3-1","2.34.4-1","2.34.5-1","2.34.6-1","2.36.0-2ubuntu2","2.36.0-2ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.44.0-0ubuntu0.22.04.1"}]}],"versions":["2.34.0-1ubuntu1","2.34.1-1ubuntu1","2.34.2-1ubuntu1","2.34.3-1","2.35.3-1ubuntu1","2.35.90-1ubuntu1","2.36.0-2ubuntu1","2.36.2-0ubuntu0.22.04.1","2.36.3-0ubuntu0.22.04.1","2.36.4-0ubuntu0.22.04.1","2.36.6-0ubuntu0.22.04.1","2.36.7-0ubuntu0.22.04.1","2.36.8-0ubuntu0.22.04.1","2.38.2-0ubuntu0.22.04.2","2.38.3-0ubuntu0.22.04.1","2.38.4-0ubuntu0.22.04.1","2.38.5-0ubuntu0.22.04.1","2.38.6-0ubuntu0.22.04.1","2.40.4-0ubuntu0.22.04.1","2.40.5-0ubuntu0.22.04.1","2.42.1-0ubuntu0.22.04.1","2.42.2-0ubuntu0.22.04.1","2.42.3-0ubuntu0.22.04.1","2.42.4-0ubuntu0.22.04.1","2.42.5-0ubuntu0.22.04.2"],"bundled":8}],"products":[{"vendor":"apple","product":"ios and ipados"},{"vendor":"apple","product":"ipad_os"},{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"macos"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/en-us/HT214039","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT214035","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT214040","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT214036","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/en-us/HT214041","tags":["x_transferred","Release Notes","Vendor Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT214039","tags":["x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/03/26/1","tags":["x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4/","tags":["x_transferred","web"]},{"url":"https://security.netapp.com/advisory/ntap-20241018-0009/","tags":["web","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42950","tags":["web","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IXLXIOAH5S7J22LJTCIAVFVVJ4TESAX4"},{"url":"https://security.netapp.com/advisory/ntap-20241018-0009"},{"url":"https://github.com/advisories/GHSA-6cvp-282g-6jp8"},{"url":"https://access.redhat.com/errata/RHSA-2024:9144","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42843","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42950","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42956","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-4558","tags":["report"]},{"url":"https://bugzilla.redhat.com/2271717","tags":["report"]},{"url":"https://bugzilla.redhat.com/2271718","tags":["report"]},{"url":"https://bugzilla.redhat.com/2271719","tags":["report"]},{"url":"https://bugzilla.redhat.com/2279689","tags":["report"]},{"url":"https://errata.almalinux.org/9/ALSA-2024-9144.html","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:9636","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23271","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27820","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27838","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27851","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-40779","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-40780","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-40782","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-40789","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-40866","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-44185","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-44187","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-44244","tags":["report"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-44296","tags":["report"]},{"url":"https://bugzilla.redhat.com/2302067","tags":["report"]},{"url":"https://bugzilla.redhat.com/2302069","tags":["report"]},{"url":"https://bugzilla.redhat.com/2302070","tags":["report"]},{"url":"https://bugzilla.redhat.com/2302071","tags":["report"]},{"url":"https://bugzilla.redhat.com/2312724","tags":["report"]},{"url":"https://bugzilla.redhat.com/2314696","tags":["report"]},{"url":"https://bugzilla.redhat.com/2314698","tags":["report"]},{"url":"https://bugzilla.redhat.com/2314702","tags":["report"]},{"url":"https://bugzilla.redhat.com/2314704","tags":["report"]},{"url":"https://bugzilla.redhat.com/2314706","tags":["report"]},{"url":"https://bugzilla.redhat.com/2323263","tags":["report"]},{"url":"https://bugzilla.redhat.com/2323278","tags":["report"]},{"url":"https://bugzilla.redhat.com/2323289","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-9636.html","tags":["advisory"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2023-42950.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2023-43010.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-27834.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-27856.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-54534.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2024-54658.html","tags":["report"]},{"url":"https://www.redhat.com/security/data/cve/CVE-2025-43480.html","tags":["report"]},{"url":"https://openjdk.org/groups/vulnerability/advisories/2024-10-15","tags":["web"]},{"url":"https://www.oracle.com/security-alerts/cpuoct2024.html","tags":["web"]},{"url":"https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2025-1751894976.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-42950","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2024-0148.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32202","tags":["report"]},{"url":"https://webkitgtk.org/2024/04/09/webkitgtk2.44.1-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2024/03/16/webkitgtk2.44.0-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2024/02/02/webkitgtk2.43.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2024/02/05/webkitgtk2.42.5-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/12/21/webkitgtk2.43.3-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/12/15/webkitgtk2.42.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/12/05/webkitgtk2.42.3-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/11/17/webkitgtk2.43.1-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/11/10/webkitgtk2.42.2-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/09/15/webkitgtk2.42.0-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/09/08/webkitgtk2.41.92-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/08/19/webkitgtk2.41.91-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/08/10/webkitgtk2.41.90-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/08/01/webkitgtk2.40.5-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/07/21/webkitgtk2.40.4-released.html","tags":["web"]},{"url":"https://webkitgtk.org/2023/07/04/webkitgtk2.41.6-released.html","tags":["web"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2485","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14556","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14562","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14573","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14578","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14581","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14593","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14621","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14664","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-22081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20922","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20926","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20952","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-20955","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21002","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21005","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21068","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21085","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21094","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21131","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21138","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21140","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21144","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21145","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21147","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21210","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21211","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21217","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21235","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2486","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2487","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2488","tags":["advisory"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2489","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_enterprise_linux/9/html/9.5_release_notes/index","tags":["article"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2279689","tags":["report"]},{"url":"https://issues.redhat.com/browse/RHEL-32578","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9144.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42843","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42843","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0002.html","tags":["article","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42950","tags":["advisory","report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42956","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42956","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2448778","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43010","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2026-0001.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-4558","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-4558","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2302067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2302069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2302070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2302071","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2312724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2323289","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9636.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23271","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23271","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0005.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27820","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27820","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2282412","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27834","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27834","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0003.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27838","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27838","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27851","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344618","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27856","tags":["advisory"]},{"url":"https://support.apple.com/en-us/120896","tags":["article"]},{"url":"https://support.apple.com/en-us/120898","tags":["article"]},{"url":"https://support.apple.com/en-us/120901","tags":["article"]},{"url":"https://support.apple.com/en-us/120902","tags":["article"]},{"url":"https://support.apple.com/en-us/120903","tags":["article"]},{"url":"https://support.apple.com/en-us/120905","tags":["article"]},{"url":"https://support.apple.com/en-us/120906","tags":["article"]},{"url":"https://webkitgtk.org/security/WSA-2025-0001.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-40779","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40779","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40779","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-40780","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40780","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40780","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-40782","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40782","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40782","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-40789","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40789","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0004.html#CVE-2024-40789","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-40866","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40866","tags":["advisory"]},{"url":"https://support.apple.com/en-us/121238","tags":["article"]},{"url":"https://support.apple.com/en-us/121241","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-44185","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44185","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0006.html","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-44187","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44187","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-44244","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44244","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-44296","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44296","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333846","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54534","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54534","tags":["advisory"]},{"url":"https://support.apple.com/en-us/121837","tags":["article"]},{"url":"https://support.apple.com/en-us/121839","tags":["article"]},{"url":"https://support.apple.com/en-us/121843","tags":["article"]},{"url":"https://support.apple.com/en-us/121844","tags":["article"]},{"url":"https://support.apple.com/en-us/121845","tags":["article"]},{"url":"https://support.apple.com/en-us/121846","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344946","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54658","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-43480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416338","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-43480","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-43480","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2025-0008.html","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2025:10364","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879532","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879535","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879559","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1903568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1928886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944859","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944862","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986852","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986860","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986881","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986883","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986888","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986892","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2017904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2018573","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034373","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034376","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034386","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034389","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2037469","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2038907","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2040331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044538","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044542","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044553","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2045291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053181","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053185","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056474","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092735","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128647","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156986","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156993","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167716","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236842","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238944","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238973","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238975","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241400","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253054","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254326","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270289","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271437","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271449","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2271456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2301841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2314700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2327931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333841","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2333845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2344624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2351802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353871","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2353872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357918","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2357919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2366504","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_10364.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-1745","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1745","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1745","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0001.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9802","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9802","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9802","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2020-0006.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9803","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9803","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9803","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9805","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9805","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9805","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9806","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9807","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9807","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9807","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9843","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9843","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9843","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9850","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9850","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9850","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9862","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9862","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9862","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2020-0007.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9893","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9894","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9894","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9894","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9895","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9895","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9895","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9915","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9915","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9915","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9925","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9925","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9925","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9947","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9947","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9947","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2021-0002.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9948","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9948","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9948","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9951","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9951","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9951","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9952","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9952","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9952","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-9983","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-9983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-9983","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13543","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2020-0009.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13558","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13558","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13558","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2021-0001.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13584","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13584","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13584","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13753","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13753","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13753","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-27918","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-27918","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-27918","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-29623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-29623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-29623","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1765","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1765","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1765","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1788","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1788","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1788","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2021-0003.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1789","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1789","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1789","tags":["advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1799","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1801","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1801","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1801","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1817","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1817","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1817","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2021-0004.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1820","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1820","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1820","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1825","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1825","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1825","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1826","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1826","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1844","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1844","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1844","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1870","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1870","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1870","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-1871","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-1871","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-1871","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21775","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21775","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21775","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21779","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21779","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21779","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21806","tags":["advisory"]},{"url":"https://talosintelligence.com/vulnerability_reports/TALOS-2020-1214","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30661","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30661","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30661","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30663","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30663","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30663","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30665","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30665","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30665","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30666","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30666","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30666","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30682","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30682","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30682","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30689","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30689","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30689","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30720","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30720","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30720","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30734","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30734","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30734","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30744","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30744","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30744","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30758","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30758","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30758","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30761","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30761","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30761","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30762","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30795","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30795","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30795","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30797","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30797","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30797","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30799","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30809","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30809","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30809","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30818","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30818","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30818","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30823","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30823","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30836","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30836","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30836","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30846","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30846","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30846","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2021-0006.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30848","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30848","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30848","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30849","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30849","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30849","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30851","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30851","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30851","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30884","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30884","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30884","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30887","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30887","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30887","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30888","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30889","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30890","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30890","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30897","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30897","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30897","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30934","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30934","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30934","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30936","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30936","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30936","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2022-0001.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30951","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30951","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30951","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30952","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30952","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30952","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30953","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30953","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30953","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30954","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30954","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30954","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30984","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30984","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30984","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-42762","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-42762","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-42762","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45481","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45481","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45481","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45482","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45482","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45482","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-45483","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-45483","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-45483","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-0108","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-0108","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-0108","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22589","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22589","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22589","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2022-0002.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22590","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22590","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22592","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22592","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22592","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22594","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22594","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22620","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22620","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22620","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2022-0003.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22624","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22624","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22624","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22628","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22628","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22628","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22629","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22637","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22637","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22637","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22662","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22662","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22662","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2022-0006.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22677","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22677","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22677","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26700","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26700","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26700","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2022-0005.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26709","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26709","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26709","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26710","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26710","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26710","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26716","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26716","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26716","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26717","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26717","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26717","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-26719","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26719","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26719","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30293","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30293","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30293","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30294","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30294","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30294","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32792","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32792","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32792","tags":["advisory"]},{"url":"https://wpewebkit.org/security/WSA-2022-0007.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32816","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32816","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32816","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32885","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32885","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32885","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0003.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32886","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32886","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32886","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2022-0009.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32888","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32888","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32888","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2022-0010.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32891","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32891","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32893","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32893","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2022-0008.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32912","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32912","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32912","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32919","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32919","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32919","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0010.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32923","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32923","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32923","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32933","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32933","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32933","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42799","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42799","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42799","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42823","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42823","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42823","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42824","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42824","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42824","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42826","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42826","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42826","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0001.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42852","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42852","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2022-0011.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42856","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42856","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42856","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42863","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42863","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42863","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42867","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42867","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42867","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46691","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46691","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46691","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46692","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46692","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46692","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46698","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46698","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46698","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46699","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46699","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46699","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46700","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46700","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46700","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46705","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46705","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46705","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46725","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46725","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46725","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-48503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-48503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48503","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23517","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23517","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23518","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23518","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23529","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23529","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23529","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0002.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-25358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-25358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-25358","tags":["advisory"]},{"url":"https://bugs.webkit.org/show_bug.cgi?id=242683","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27932","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27932","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27932","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-27954","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-27954","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-27954","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28198","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28198","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28198","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0008.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-28205","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-28205","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-28205","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6qjh-p74q-89mv","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32359","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32359","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32359","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32370","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32370","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32370","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32373","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32373","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32373","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32393","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32393","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32393","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0006.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32435","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32435","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32435","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0005.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-32439","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-32439","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-32439","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-35074","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-35074","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-35074","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37450","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37450","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37450","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38133","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38133","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38133","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0007.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38572","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38572","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38572","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38592","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38592","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38592","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38594","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38594","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38594","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38595","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38595","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38595","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38597","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38597","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38597","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38599","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38599","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38599","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38600","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38600","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38600","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38611","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38611","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39928","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39928","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39928","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0009.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40397","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40397","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40397","tags":["advisory"]},{"url":"https://wpewebkit.org/security/WSA-2023-0008.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40414","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40414","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40414","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40451","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40451","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40451","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41074","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41074","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41074","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41983","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41983","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41983","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41993","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41993","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41993","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42833","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42833","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42852","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42852","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42852","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42875","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42875","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42875","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2025-0004.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42883","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42883","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42883","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42890","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42890","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42890","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42916","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42916","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42916","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42917","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42917","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42917","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2023-0011.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-42970","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-42970","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42970","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43000","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2416324","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43000","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43000","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23213","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23213","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23213","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23222","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23222","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23222","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23252","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23252","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23252","tags":["advisory"]},{"url":"https://seclists.org/fulldisclosure/2024/Mar/21","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23254","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23254","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23263","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23263","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23263","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23280","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23280","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23280","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23284","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23284","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23284","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27808","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27808","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27808","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-27833","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-27833","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-27833","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-40776","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-40776","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-40776","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0004.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-44192","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-44192","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44192","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2025-0002.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-44308","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-44308","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44308","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2024-0007.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-44309","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-44309","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-44309","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54467","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54467","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54479","tags":["advisory"]},{"url":"https://support.apple.com/en-us/121838","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54502","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54502","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54502","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54505","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54505","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54505","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54508","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54508","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54508","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54543","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54543","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54543","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-54551","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-54551","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-54551","tags":["advisory"]},{"url":"https://webkitgtk.org/security/WSA-2025-0003.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24143","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24143","tags":["advisory"]},{"url":"https://support.apple.com/en-us/122066","tags":["article"]},{"url":"https://support.apple.com/en-us/122068","tags":["article"]},{"url":"https://support.apple.com/en-us/122073","tags":["article"]},{"url":"https://support.apple.com/en-us/122074","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24150","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24150","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24158","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24158","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24158","tags":["advisory"]},{"url":"https://support.apple.com/en-us/122071","tags":["article"]},{"url":"https://support.apple.com/en-us/122072","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24162","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24162","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24162","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24201","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24201","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24201","tags":["advisory"]},{"url":"https://support.apple.com/en-us/122281","tags":["article"]},{"url":"https://support.apple.com/en-us/122284","tags":["article"]},{"url":"https://support.apple.com/en-us/122285","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24208","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24208","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24208","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24209","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24209","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24209","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24213","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24213","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24213","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24216","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24216","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24216","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24223","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24223","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24223","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-24264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-24264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-24264","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-30427","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-30427","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-30427","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-31204","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31204","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31204","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-31205","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31205","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31205","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-31206","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31206","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31206","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-31215","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31215","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31215","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-31257","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-31257","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31257","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241269-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1222010","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42843","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42950","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-42956","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23252","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23254","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23280","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23284","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241270-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241293-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241944-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1225071","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-27834","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241976-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1215868","tags":["report"]},{"url":"https://bugzilla.suse.com/1215869","tags":["report"]},{"url":"https://bugzilla.suse.com/1215870","tags":["report"]},{"url":"https://bugzilla.suse.com/1218033","tags":["report"]},{"url":"https://bugzilla.suse.com/1222905","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-23226","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2023-42950","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6732-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-42843","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-42956","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23252","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23254","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23263","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23280","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2024-23284","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2023-42950","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2024-03-28T15:39:16.227Z","modified":"2025-11-03T21:49:36.789Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:35:18.16233Z"}],"euvd":[{"id":"EUVD-2023-47371","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2024-03-28T15:39:16Z","modified":"2025-11-03T21:49:36Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:30.775561Z"}],"ghsa":[{"id":"GHSA-6cvp-282g-6jp8","title":"A use after free issue was addressed with improved memory management. This issue is fixed in...","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2024-03-28T18:30:47Z","modified":"2025-11-04T00:31:53Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T15:04:29.580531Z"}],"nvd":[{"id":"CVE-2023-42950","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2024-03-28T16:15:08.313Z","modified":"2026-06-17T06:24:55.203Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-416"],"updated_at":"2026-11-02T14:09:10.192572Z"}],"osv":[{"id":"CVE-2023-42950","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2024-03-28T16:15:08.313Z","modified":"2026-11-02T09:42:00.976676704Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:33.792101Z"},{"id":"DEBIAN-CVE-2023-42950","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2024-03-28T16:15:08.313Z","modified":"2026-10-26T18:03:06.625753965Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:40.275853Z"},{"id":"OESA-2024-2485","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-22025)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-22081)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:57Z","modified":"2026-08-18T01:18:42.66591819Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2486","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-22025)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-22081)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:58Z","modified":"2026-08-18T01:18:42.723885544Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2487","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:58Z","modified":"2026-08-18T01:18:42.645392557Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2488","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-22025)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-22081)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:58Z","modified":"2026-08-18T01:18:42.672281702Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"OESA-2024-2489","title":"openjdk-latest security update","description":"The OpenJDK runtime environment.\r\n\r\nSecurity Fix(es):\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data as well as unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2020-14556)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14562)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14573)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14577)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261 and 8u251; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2020-14578)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified Component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2020-14581)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).(CVE-2020-14593)\r\n\r\nVulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2020-14621)\r\n\r\nVulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).(CVE-2020-14664)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u381-perf, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 21.3.7 and  22.3.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition,.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2023-22025)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE).  Supported versions that are affected are Oracle Java SE: 8u381, 8u381-perf, 11.0.20, 17.0.8, 21; Oracle GraalVM for JDK: 17.0.8, 21; Oracle GraalVM Enterprise Edition: 20.3.11, 21.3.7 and  22.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2023-22081)\r\n\r\nA use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.(CVE-2023-42950)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20918)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.9 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20919)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20921)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20922)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).(CVE-2024-20923)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and  21.3.8. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-20925)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.9 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20926)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 17.0.9; Oracle GraalVM for JDK: 17.0.9; Oracle GraalVM Enterprise Edition: 21.3.8 and  22.3.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N).(CVE-2024-20932)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N).(CVE-2024-20945)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security).  Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-20952)\r\n\r\nVulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle GraalVM for JDK: 17.0.9, 21.0.1; Oracle GraalVM Enterprise Edition: 20.3.12, 21.3.8 and  22.3.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized read access to a subset of Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).(CVE-2024-20955)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21002)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21003)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Java SE, Oracle GraalVM Enterprise Edition executes to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 2.5 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21004)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX).  Supported versions that are affected are Oracle Java SE: 8u401; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.1 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N).(CVE-2024-21005)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22;   Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21011)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21012)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2 and  22; Oracle GraalVM Enterprise Edition: 21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21068)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21085)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10, 21.0.2, 22; Oracle GraalVM Enterprise Edition: 20.3.13 and  21.3.9. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21094)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21131)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21138)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21140)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21144)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21145)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK: 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM Enterprise Edition: 20.3.14 and  21.3.10. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized creation, deletion or modification access to critical data or all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized access to critical data or complete access to all Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 7.4 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N).(CVE-2024-21147)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21208)\r\n\r\nVulnerability in Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and  23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21210)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler).  Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).(CVE-2024-21211)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 3.7 (Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L).(CVE-2024-21217)\r\n\r\nVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot).  Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23;   Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23;   Oracle GraalVM Enterprise Edition: 20.3.15 and  21.3.11. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition.  Successful attacks of this vulnerability can result in  unauthorized update, insert or delete access to some of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data as well as  unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability can be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. This vulnerability also applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 4.8 (Confidentiality and Integrity impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N).(CVE-2024-21235)","status":"published","published":"2024-11-29T11:07:58Z","modified":"2026-08-18T01:18:41.558739003Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:42.253598Z"},{"id":"RHSA-2024:9144","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2024-11-15T21:27:30Z","modified":"2026-09-01T10:03:42Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"RHSA-2024:9636","title":"Red Hat Security Advisory: webkit2gtk3 security update","status":"published","published":"2024-11-21T21:57:52Z","modified":"2026-09-01T10:03:43Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"RHSA-2025:10364","title":"Red Hat Security Advisory: webkitgtk4 security update","status":"published","published":"2025-07-07T10:02:50Z","modified":"2026-10-15T10:09:29Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:15.137262Z"},{"id":"UBUNTU-CVE-2023-42950","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2024-03-28T16:15:00Z","modified":"2026-10-08T12:51:41.179873228Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:22.741943Z"},{"id":"ALSA-2024:9144","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * webkit: visiting a malicious website may lead to address bar spoofing (CVE-2023-42843)\n  * webkit: heap use-after-free may lead to arbitrary code execution (CVE-2023-42950)\n  * webkit: processing malicious web content may lead to a denial of service (CVE-2023-42956)\n  * chromium-browser: Use after free in ANGLE (CVE-2024-4558)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.  \n\nAdditional Changes:  \n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.\n","status":"published","published":"2024-11-12T00:00:00Z","modified":"2026-10-29T11:31:51.083645974Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"ALSA-2024:9636","title":"Important: webkit2gtk3 security update","description":"WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform.  \n\nSecurity Fix(es):  \n\n  * chromium-browser: Use after free in ANGLE (CVE-2024-4558)\n  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-40789)\n  * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40780)\n  * webkitgtk: webkit2gtk: Out-of-bounds read was addressed with improved bounds checking (CVE-2024-40779)\n  * webkitgtk: webkit2gtk: Use-after-free was addressed with improved memory management (CVE-2024-40782)\n  * webkitgtk: Visiting a malicious website may lead to address bar spoofing (CVE-2024-40866)\n  * webkitgtk: A malicious website may cause unexpected cross-origin behavior (CVE-2024-23271)\n  * webkitgtk: Processing web content may lead to arbitrary code execution (CVE-2024-27820)\n  * webkitgtk: A maliciously crafted webpage may be able to fingerprint the user (CVE-2024-27838)\n  * webkitgtk: Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2024-27851)\n  * webkitgtk: A malicious website may exfiltrate data cross-origin (CVE-2024-44187)\n  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44185)\n  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may lead to an unexpected process crash (CVE-2024-44244)\n  * webkitgtk: webkit2gtk: Processing maliciously crafted web content may prevent Content Security Policy from being enforced (CVE-2024-44296)\n\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n","status":"published","published":"2024-11-14T00:00:00Z","modified":"2026-11-02T09:43:04.094507925Z","updated_at":"2026-11-02T15:27:53.030731Z"},{"id":"BIT-java-2023-42950","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2026-05-06T14:44:05.128Z","modified":"2026-09-08T08:47:59.884571197Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-java-min-2023-42950","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2026-05-06T14:44:08.714Z","modified":"2026-09-08T08:47:55.386782883Z","updated_at":"2026-11-02T15:28:31.42203Z"},{"id":"BIT-jre-2023-42950","description":"A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.","status":"published","published":"2026-05-08T05:45:40.029Z","modified":"2026-09-08T08:48:05.574369799Z","updated_at":"2026-11-02T15:28:31.782692Z"},{"id":"CLSA-2025-1751894976","title":"webkit2gtk3: Fix of 4 CVEs","description":"- Update to 2.44.4\n- CVE-2023-42950: fix a use after free issue\n- CVE-2024-27851: fix processing maliciously crafted web content may lead to arbitrary code execution\n- CVE-2024-27820: fix processing web content may lead to arbitrary code execution\n- CVE-2024-4558: fix use after free in ANGLE","status":"published","published":"2025-07-07T13:29:41Z","modified":"2026-10-21T10:46:27.995151207Z","updated_at":"2026-11-02T15:43:41.66212Z"},{"id":"DSA-5684-1","title":"webkit2gtk - security update","status":"published","published":"2024-05-09T00:00:00Z","modified":"2026-03-09T02:10:29.064386Z","updated_at":"2026-11-02T15:46:17.892347Z"},{"id":"MGASA-2024-0148","title":"Updated webkit2 packages fix security vulnerabilities","description":"Due to issues in our build system this package is very outdated, now\nthat the issues are fixed we are publishing the current upstream\nversion.\nLot of CVEs are fixed and a lot of changes were made by upstream, see\nthe links.\n","status":"published","published":"2024-04-26T06:47:12Z","modified":"2026-04-16T04:43:25.746626234Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"SUSE-SU-2024:1269-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:                                                                                            \n\n- CVE-2024-23252: Fixed denial of service via crafted web content (bsc#1222010).\n- CVE-2024-23254: Fixed possible audio data exilftration cross-origin via malicious website (bsc#1222010).\n- CVE-2024-23263: Fixed lack of Content Security Policy enforcing via malicious crafted web content (bsc#1222010).\n- CVE-2024-23280: Fixed possible user fingeprint via malicious crafted web content (bsc#1222010).\n- CVE-2024-23284: Fixed lack of Content Security Policy enforcing via malicious crafted web content (bsc#1222010).\n- CVE-2023-42950: Fixed arbitrary code execution via crafted web content (bsc#1222010).\n- CVE-2023-42956: Fixed denial of service via crafted web content (bsc#1222010).                                                                   \n- CVE-2023-42843: Fixed address bar spoofing via malicious website (bsc#1222010).\n\nOther fixes:\n\n- Update to version 2.44.0 (bsc#1222010):                                                                                                                         \n  + Make the DOM accessibility tree reachable from UI process with                                                                     \n    GTK4.                                                                        \n  + Removed the X11 and WPE renderers in favor of DMA-BUF.\n  + Improved vblank synchronization when rendering.       \n  + Removed key event reinjection in GTK4 to make keyboard                                                                             \n    shortcuts work in web sites.                                                 \n  + Fix gamepads detection by correctly handling focused window in                                                                     \n    GTK4.                                                                                                                                          \n","status":"published","published":"2024-04-12T13:34:17Z","modified":"2026-02-04T03:57:30.355416Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1270-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:                                                                                            \n\n- CVE-2024-23252: Fixed denial of service via crafted web content (bsc#1222010).\n- CVE-2024-23254: Fixed possible audio data exilftration cross-origin via malicious website (bsc#1222010).\n- CVE-2024-23263: Fixed lack of Content Security Policy enforcing via malicious crafted web content (bsc#1222010).\n- CVE-2024-23280: Fixed possible user fingeprint via malicious crafted web content (bsc#1222010).\n- CVE-2024-23284: Fixed lack of Content Security Policy enforcing via malicious crafted web content (bsc#1222010).\n- CVE-2023-42950: Fixed arbitrary code execution via crafted web content (bsc#1222010).\n- CVE-2023-42956: Fixed denial of service via crafted web content (bsc#1222010).                                                                   \n- CVE-2023-42843: Fixed address bar spoofing via malicious website (bsc#1222010).\n\nOther fixes:\n\n- Update to version 2.44.0 (bsc#1222010):                                                                                                                         \n  + Make the DOM accessibility tree reachable from UI process with                                                                     \n    GTK4.                                                                        \n  + Removed the X11 and WPE renderers in favor of DMA-BUF.\n  + Improved vblank synchronization when rendering.       \n  + Removed key event reinjection in GTK4 to make keyboard                                                                             \n    shortcuts work in web sites.                                                 \n  + Fix gamepads detection by correctly handling focused window in                                                                     \n    GTK4.                                                                                                                                          \n","status":"published","published":"2024-04-12T13:35:02Z","modified":"2026-02-04T03:27:11.309547Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1293-1","title":"Security update for webkit2gtk3","description":"\nwebkit2gtk3 was updated to fix the following issues:\n\nUpdate to version 2.44.0 (boo#1222010):\n\n- CVE-2024-23252:\n\n    Credit to anbu1024 of SecANT.\n    Impact: Processing web content may lead to a denial-of-service.\n    Description: The issue was addressed with improved memory handling.\n\n- CVE-2024-23254:\n\n    Credit to James Lee (@Windowsrcer).\n    Impact: A malicious website may exfiltrate audio data cross-origin.\n    Description: The issue was addressed with improved UI handling.\n\n- CVE-2024-23263:\n\n    Credit to Johan Carlsson (joaxcar).\n    Impact: Processing maliciously crafted web content may prevent\n    Content Security Policy from being enforced. Description: A logic\n    issue was addressed with improved validation.\n\n- CVE-2024-23280:\n\n    Credit to An anonymous researcher.\n    Impact: A maliciously crafted webpage may be able to fingerprint the\n    user. Description: An injection issue was addressed with improved\n    validation.\n\n- CVE-2024-23284:\n\n    Credit to Georg Felber and Marco Squarcina.\n    Impact: Processing maliciously crafted web content may prevent\n    Content Security Policy from being enforced. Description: A logic\n    issue was addressed with improved state management.\n\n- CVE-2023-42950:\n\n    Credit to Nan Wang (@eternalsakura13) of 360 Vulnerability Research\n    Institute and rushikesh nandedkar.\n    Impact: Processing maliciously crafted web content may lead to\n    arbitrary code execution. Description: A use after free issue was\n    addressed with improved memory management.\n\n- CVE-2023-42956:\n\n    Credit to SungKwon Lee (Demon.Team).\n    Impact: Processing web content may lead to a denial-of-service.\n    Description: The issue was addressed with improved memory handling.\n\n- CVE-2023-42843:\n\n    Credit to Kacper Kwapisz (@KKKas_).\n    Impact: Visiting a malicious website may lead to address bar\n    spoofing. Description: An inconsistent user interface issue was\n    addressed with improved state management.\n\n\n+ Make the DOM accessibility tree reachable from UI process with GTK4.\n+ Removed the X11 and WPE renderers in favor of DMA-BUF.\n+ Improved vblank synchronization when rendering.\n+ Removed key event reinjection in GTK4 to make keyboard shortcuts work in web sites.\n+ Fix gamepads detection by correctly handling focused window in GTK4.\n\n- Use WebAssembly on aarch64. It is the upstream default and no\n  longer makes the build fail. Stop passing -DENABLE_C_LOOP=ON,\n  -DENABLE_WEBASSEMBLY=OFF and -DENABLE_SAMPLING_PROFILER=OFF for\n  the same reason.\n","status":"published","published":"2024-04-15T14:48:15Z","modified":"2026-02-04T02:29:44.646573Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1944-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\n- Update to version 2.44.2 (bsc#1225071):\n- CVE-2024-23252: Fixed a vulnerability where processed web content may lead to a denial-of-service. (bsc#1222010)\n- CVE-2024-23254: Fixed a vulnerability where a malicious website may exfiltrate audio data cross-origin. (bsc#1222010)\n- CVE-2024-23263: Fixed a vulnerability where processed maliciously crafted web content may prevent Content Security Policy from being enforced. (bsc#1222010)\n- CVE-2024-23280: Fixed a vulnerability where a maliciously crafted webpage may be able to fingerprint the user. (bsc#1222010)\n- CVE-2024-23284: Fixed a vulnerability where processed maliciously crafted web content may prevent Content Security Policy from being enforced. (bsc#1222010)\n- CVE-2023-42950: Fixed a vulnerability where processed maliciously crafted web content may lead to arbitrary code execution. (bsc#1222010)\n- CVE-2023-42956: Fixed a vulnerability where processed web content may lead to a denial-of-service. (bsc#1222010)\n- CVE-2023-42843: Fixed a vulnerability where visiting a malicious website may lead to address bar spoofing. (bsc#1222010)\n- CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071)\n","status":"published","published":"2024-06-07T15:04:40Z","modified":"2026-02-04T03:07:13.689826Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"SUSE-SU-2024:1976-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 fixes the following issues:\n\n- Update to version 2.44.2 (bsc#1225071)\n- CVE-2024-27834: Fixed a vulnerability where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication. (bsc#1225071)\n","status":"published","published":"2024-06-11T07:36:06Z","modified":"2026-02-04T04:31:58.949767Z","updated_at":"2026-11-02T15:53:54.652421Z"},{"id":"USN-6732-1","title":"webkit2gtk vulnerabilities","description":"Several security issues were discovered in the WebKitGTK Web and JavaScript\nengines. If a user were tricked into viewing a malicious website, a remote\nattacker could exploit a variety of issues related to web browser security,\nincluding cross-site scripting attacks, denial of service attacks, and\narbitrary code execution.\n","status":"published","published":"2024-04-15T16:29:45Z","modified":"2026-04-22T10:45:48.548328Z","updated_at":"2026-11-02T16:58:17.914523Z"}]}}