Skip to content
NewA calmer, faster ZeroHour
StoryVulnerabilityhigh

USN-8796-1: OpenJDK 21 vulnerabilities

1 source · 2 articlesFirst reported Updated ()2
Merged summary · from the lead articleSummaries by Vani AI

OpenJDK 21 reveals three authentication vulnerabilities that could lead to sensitive information leakage or denial of service.

OpenJDK 21 exposes multiple authentication-related vulnerabilities (CVE-2026-61308, CVE-2026-70907, CVE-2026-60589), where remote attackers could potentially leak sensitive information or cause a denial of service.

Key facts
  • OpenJDK 21 contains three security vulnerabilities related to user authentication and potential information leakage or denial of service.
Analyze CVE-2026-61308 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2026-61308CVE-2026-70907CVE-2026-60589
Vendors
Ubuntu Security NoticesMicrosoft
Products
OpenJDKMicrosoft 365 companion apps
Victims
Microsoft 365 users
Organizations
Microsoft
Countries
JapanUS
AI models
OpenJDK 21Microsoft 365 companion apps

Coverage

oldest first · one row per article · UTC
  1. · Sep 21, 2026 Ubuntu Security NoticesFirst report

    USN-8795-1: OpenJDK 17 vulnerabilities

    Microsoft retires its Microsoft 365 companion apps in December 2026, requiring admins to remove them from managed devices.

  2. · Sep 21, 2026 Ubuntu Security Notices

    USN-8796-1: OpenJDK 21 vulnerabilities

    OpenJDK 21 reveals three authentication vulnerabilities that could lead to sensitive information leakage or denial of service.

Vulnerabilities in this story

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2026-61308
+2 related CVEs
CVE-2026-70907CVE-2026-60589
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component
6.8
group max
<1%