Oracle JDK CVE-2024-44309 Cross Site Scripting Vulnerability
Description
A vulnerability in the JavaFX WebKitGTK component of Oracle Java SE 8u441 and Oracle GraalVM Enterprise Edition 20.3.17/21.3.13 allows unauthenticated network attackers to compromise the products after human interaction, potentially leading to full takeover with confidentiality, integrity, and availability loss.
Affected Applications
Java JDK
Version Updates
| Date | Version | Status | Detail |
|---|---|---|---|
| 2025-04-17 | 1.00838 |
New
|
Java JDK |