USN-8795-1: OpenJDK 17 vulnerabilities
Microsoft retires its Microsoft 365 companion apps in December 2026, requiring admins to remove them from managed devices.
Microsoft announced the retirement of its Microsoft 365 companion apps (Calendar, People, Files) on December 16, 2026, requiring admins to remove them from managed devices.
- Microsoft will retire Microsoft 365 companion apps in December 2026
- Apps are taskbar-integrated and include Copilot AI assistance
- Admins urged to remove apps from managed devices
- Vendors
- Microsoft
- Products
- Microsoft 365 companion apps
- Victims
- Microsoft 365 users
- Organizations
- Microsoft
- Countries
- US
- AI models
- Microsoft 365 companion apps
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-61308+2 related CVEs | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component | 6.8 group max | <1% |
From the original article
Kai Aizen discovered that the Networking component of OpenJDK 17 did not correctly handle user authentication. A remote attacker could possibly use this issue to leak sensitive information. (CVE-2026-61308) It was discovered that the JSSE component of OpenJDK 17 did not correctly handle user authentication.
ubuntu.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.