Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
OpenJDK 11 and 17 libraries may let attackers run code
published 5 days ago
Summary
The library components in OpenJDK 11 and OpenJDK 17 builds from CleanStart contain a flaw that could allow an attacker to execute arbitrary code on a vulnerable system. This can lead to unauthorized actions or data loss. Apply the latest security updates from the vendor as soon as they are available.
What to do
- Update cleanstart openjdk11 to version 11.0.19_p7-r0.
- Update cleanstart openjdk17 to version 17.0.7_p7-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | openjdk11 |
< 11.0.19_p7-r0 Fix: upgrade to 11.0.19_p7-r0
|
| CleanStart | cleanstart | openjdk17 |
< 17.0.7_p7-r0 Fix: upgrade to 17.0.7_p7-r0
|
Original advisory text
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
CVE-2023-21938 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Sources
CLEANSTART-2026-ZN44183 · OSV
Track software like this
Free during beta