CVE-2024-20945

CVE-2024-20945 is a low-privileged vulnerability affecting Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, specifically within the Security component. This vulnerability, rated Medium with a CVSS score of 4.7, requires a low-privileged attacker with logon access to the infrastructure where Java executes. While difficult to exploit, successful attacks can lead to unauthorized access to critical or all accessible data, including through APIs or sandboxed Java deployments. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.