CVE-2024-20952

score

<0.1

cvss

7.4

epss

0.9%

published

2024-01-16

kev added

—

first seen

2026-10-21

Oracle Java SE 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; GraalVM for JDK 17.0.9, 21.0.1; GraalVM Enterprise 20.3.12, 21.3.8, 22.3.4 contain a security vulnerability caused by untrusted code execution in sandboxed environments, letting unauthenticated network attackers compromise data and access sensitive information, exploit requires loading untrusted code in sandboxed Java applications.