Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
OpenJDK 11, 17, 21 can be tricked into running code
published 5 days ago
Summary
The OpenJDK versions 11, 17, and 21 have a flaw in the Hotspot component that could let an attacker execute unauthorized code. This could affect any application that runs on these Java runtimes. Update to the latest patched releases of OpenJDK or apply the vendor's security patches as soon as possible.
What to do
- Update cleanstart openjdk11 to version 11.0.23_p9-r0.
- Update cleanstart openjdk17 to version 17.0.11_p9-r0.
- Update cleanstart openjdk21 to version 21.0.3_p9-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | openjdk11 |
< 11.0.23_p9-r0 Fix: upgrade to 11.0.23_p9-r0
|
| CleanStart | cleanstart | openjdk17 |
< 17.0.11_p9-r0 Fix: upgrade to 17.0.11_p9-r0
|
| CleanStart | cleanstart | openjdk21 |
< 21.0.3_p9-r0 Fix: upgrade to 21.0.3_p9-r0
|
Original advisory text
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
CVE-2024-21094 affects multiple packages. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published14 Oct 2026
Updated14 Oct 2026
First seen14 Oct 2026
Sources
CLEANSTART-2026-YP18578 · OSV
Track software like this
Free during beta