Published on: 17 April 2024
Oracle has released the Critical Patch Update (CPU) Advisory with collections of patches for multiple vulnerabilities found in Java SE and various Oracle products. The list of patches can be found at:
https://www.oracle.com/security-alerts/cpuapr2024.html
Reports indicated that the vulnerability (CVE-2023-41993) in Oracle Java SE and Oracle GraalVM Enterprise Edition is being exploited in the wild. System administrators and users are advised to take immediate actions to patch your affected systems to mitigate the elevated risk of cyber attacks.
A complete list of the affected products can be found at:
https://www.oracle.com/security-alerts/cpuapr2024.html
Successful exploitation of the vulnerabilities could lead to remote code execution, denial of service, elevation of privilege, information disclosure, security restriction bypass, spoofing or tampering on an affected system.
Patches for affected systems are available. Users of the affected systems should follow the recommendations provided by the product vendor and take immediate actions to mitigate the risk.
For Oracle Java SE products, please refer to the following link:
https://www.oracle.com/java/technologies/javase-downloads.html
For OpenJDK, please refer to the following link:
https://jdk.java.net/
Users could also access the security advisory below for the information about the security updates of other Oracle products:
https://www.oracle.com/security-alerts/cpuapr2024.html
Users may contact their product support vendors for the fixes and assistance.