CVE-2024-20952

CVE-2024-20952 is a difficult-to-exploit security vulnerability in Oracle Java SE and Oracle GraalVM products, specifically affecting sandboxed Java client deployments that execute untrusted code. An unauthenticated attacker with network access can compromise affected systems, leading to unauthorized creation, deletion, or modification of critical data, as well as complete access to all accessible data. With a CVSS 3.1 Base Score of 7.4 (High), this vulnerability primarily impacts confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.