70 matches found
CVE-2021-41035
In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods...
CVE-2021-41035: Execution with Unnecessary Privileges
In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods...
PT-2021-23057
Name of the Vulnerable Software and Affected Versions Eclipse Openj9 versions prior to 0.29.0 Description The issue is related to the JVM not throwing IllegalAccessError for MethodHandles that invoke inaccessible interface methods. This could potentially allow an attacker to obtain sensitive...
Eclipse Openj9 安全漏洞
Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A security vulnerability exists in Eclipse Openj9 versions prior to 0.29.0 that stems from the JVM not throwing an IllegalAccessError exception for MethodHandles that...
Arbitrary Code Execution
java is vulnerable to arbitrary code execution. The vulnerability exists as MethodHandles in HotSpot JVM does not properly handle methods...
Permission Check Bypass
OpenJDK 7 Java Runtime Environment and OpenJDK 7 Software Development Kit is vulnerable to permission check bypass. The attack is due to incorrect setter access check in MethodHandles.java, allowing an attacker to set value of a final field...
Oracle Java MethodHandles setVolatile Type Confusion Sandbox Escape Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation o...
Oracle Java MethodHandles tryFinally Type Confusion Sandbox Escape Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation o...
OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...
OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...
OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...
jdk7-openjdk: multiple issues
CVE-2016-3458 sandbox restriction bypass It was discovered that the CORBA component of OpenJDK did not sufficiently restrict the use of custom ValueHandler when performing object deserialization. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox...
OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598...
OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...
OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598...
Oracle Java MethodHandles dropArguments Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation o...
Oracle Java MethodHandles filterReturnValue Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation o...
OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610...
OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598...
OpenJDK: MethodHandles.Lookup insufficient modifiers checks (Libraries, 8035788)
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Libraries...