4 matches found
CVE-2024-20926
creationtimestamp| type| source ---|---|--- 2024-02-09 16:51:42+00:00| seen| https://t.me/ctinow/182143 2025-05-15 16:35:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16526...
Important: java-1.8.0-openjdk
Issue Overview: A vulnerability that allows an attacker to execute arbitrary java code from the javascript engine even though the option "--no-java" was set. CVE-2024-20918 With carefully crafted custom bytecodes, arbitrary unverified bytecodes could be executed. CVE-2024-20919 Loop optimizations...
CLSA-2024-1706696899 java-1.8.0-openjdk: Fix of 8 CVEs
Upgrade to openjdk-shenandoah-jdk8u-shenandoah-jdk8u402-b06. That fixes following CVEs: - CVE-2024-20918: Array out-of-bounds access due to missing range check in C1 compiler - CVE-2024-20919: JVM class file verifier flaw allows unverified bytecode execution - CVE-2024-20921: Range check loop...
