CVE-2024-21140

CVE-2024-21140 is a difficult-to-exploit vulnerability affecting Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, specifically within the Hotspot component. An unauthenticated attacker with network access can compromise these products, potentially leading to unauthorized read, update, insert, or delete access to a subset of accessible data. The vulnerability has a CVSS 3.1 Base Score of 4.8 (Medium), indicating limited confidentiality and integrity impacts. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.