Vulnerability in Oracle Java SE (component: Libraries). The supported version that is affected is Oracle Java SE: 25.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Java SE accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 3.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N).
CVSS Details
- CVSS 3.1 Base Score: 3.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade java-25-openjdk-devel-slowdebugUpgrade java-25-openjdk-static-libs-fastdebugUpgrade java-25-openjdk-develUpgrade java-25-openjdk-headless-fastdebugUpgrade java-25-openjdk-src-slowdebugUpgrade java-25-openjdk-demoUpgrade java-25-openjdk-slowdebugUpgrade java-25-openjdk-static-libsUpgrade java-25-openjdk-static-libs-slowdebugUpgrade java-25-openjdk-crypto-adapter-fastdebugUpgrade java-25-openjdkUpgrade java-25-openjdk-jmods-fastdebugUpgrade java-25-openjdk-srcUpgrade java-25-openjdk-demo-fastdebugUpgrade java-25-openjdk-jmods-slowdebugUpgrade java-25-openjdk-crypto-adapterUpgrade java-25-openjdk-headless-slowdebugUpgrade java-25-openjdk-src-fastdebugUpgrade java-25-openjdk-demo-slowdebugUpgrade java-25-openjdk-crypto-adapter-slowdebugUpgrade java-25-openjdk-headlessUpgrade java-25-openjdk-devel-fastdebugUpgrade java-25-openjdk-javadoc-zipUpgrade java-25-openjdk-jmodsUpgrade java-25-openjdk-javadocUpgrade java-25-openjdk-fastdebug | Apr 27, 2026 | Apr 22, 2026 |
| Alpine Linux | — | Upgrade openjdk25 | May 20, 2026 | Apr 21, 2026 |
| Amazon_linux_2023 | — | Upgrade java-25-amazon-corretto-javadocUpgrade java-25-amazon-corretto-jmodsUpgrade java-25-amazon-corretto-headlessUpgrade java-25-amazon-correttoUpgrade java-25-amazon-corretto-debugsymbolsUpgrade java-25-amazon-corretto-devel | May 19, 2026 | Apr 21, 2026 |
| Azul Zulu | — | Apply Azul Zulu JDK 26 installer 26.30.11 (JDK 26.0.1+8, PSU) (short-term support); migrate to JDK 25 (LTS)Upgrade to Azul Zulu JDK 25 installer 25.33.16 (JDK 25.0.2.0.101+1, quarterly CPU) (LTS stream) | Apr 21, 2026 | Apr 21, 2026 |
| Debian | — | Upgrade openjdk-25 | Jul 23, 2026 | Jul 23, 2026 |
| Eclipseadoptium | — | Upgrade to the latest version of Eclipse Adoptium | Jun 26, 2026 | Apr 21, 2026 |
| Gentoo Linux | — | Upgrade media-libs/freetype. | Aug 13, 2026 | Aug 12, 2026 |
| Jre Vuln | — | Upgrade to the latest version of Oracle Java | Apr 23, 2026 | Apr 21, 2026 |
| Redhat_linux | — | Upgrade java-25-openjdk-static-libs-fastdebugUpgrade java-25-openjdkUpgrade java-25-openjdk-devel-slowdebug-debuginfoUpgrade java-25-openjdk-fastdebugUpgrade java-25-openjdk-src-slowdebugUpgrade java-25-openjdk-static-libs-slowdebugUpgrade java-25-openjdk-src-fastdebugUpgrade java-25-openjdk-javadoc-zipUpgrade java-25-openjdk-slowdebugUpgrade java-25-openjdk-crypto-adapter-fastdebugUpgrade java-25-openjdk-headless-fastdebugUpgrade java-25-openjdk-crypto-adapter-debuginfoUpgrade java-25-openjdk-devel-slowdebugUpgrade java-25-openjdk-headlessUpgrade java-25-openjdk-devel-fastdebug-debuginfoUpgrade java-25-openjdk-crypto-adapter-slowdebug-debuginfoUpgrade java-25-openjdk-jmods-slowdebugUpgrade java-25-openjdk-crypto-adapter-slowdebugNo solution existsUpgrade java-25-openjdk-demo-slowdebugUpgrade java-25-openjdk-develUpgrade java-25-openjdk-crypto-adapter-fastdebug-debuginfoUpgrade java-25-openjdk-headless-debuginfoUpgrade java-25-openjdk-devel-fastdebugUpgrade java-25-openjdk-debuginfoUpgrade java-25-openjdk-static-libsUpgrade java-25-openjdk-fastdebug-debuginfoUpgrade java-25-openjdk-headless-slowdebug-debuginfoUpgrade java-25-openjdk-srcUpgrade java-25-openjdk-jmodsUpgrade java-25-openjdk-crypto-adapterUpgrade java-25-openjdk-headless-fastdebug-debuginfoUpgrade java-25-openjdk-headless-slowdebugUpgrade java-25-openjdk-javadocUpgrade java-25-openjdk-devel-debuginfoUpgrade java-25-openjdk-debugsourceUpgrade java-25-openjdk-slowdebug-debuginfoUpgrade java-25-openjdk-demo-fastdebugUpgrade java-25-openjdk-jmods-fastdebugUpgrade java-25-openjdk-demo | Apr 28, 2026 | Apr 21, 2026 |
| Ubuntu | — | Upgrade openjdk-25-jdkUpgrade openjdk-25-jre-headlessUpgrade openjdk-25-jreUpgrade openjdk-25-crac-jreUpgrade openjdk-26-jre-zeroUpgrade openjdk-26-jre-headlessUpgrade openjdk-25-jdk-headlessUpgrade openjdk-26-jdk-headlessUpgrade openjdk-26-jdkUpgrade openjdk-26-jreUpgrade openjdk-25-crac-jdkUpgrade openjdk-25-crac-jdk-headlessUpgrade openjdk-25-crac-jre-zeroUpgrade openjdk-25-jre-zeroUpgrade openjdk-25-crac-jre-headless | May 31, 2026 | May 28, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub