CVE-2024-40673

Summary

CVE-2024-40673 is a newly disclosed vulnerability affecting the Source of ZipFile.java. An attacker can manipulate Dynamic Code Loading by providing malicious input, leading to arbitrary code execution. This vulnerability does not require user interaction or additional execution privileges and could result in remote code execution. The issue is caused by improper input validation in the ZipFile.java source code.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.