Threats tagged 'bit-jre-2025-0509'

A vulnerability in Sparkle before version 2.6.4 allows an attacker to bypass (Ed)DSA signing checks by replacing a signed update with a malicious payload. This affects certain versions of the Java Runtime Environment (JRE) as specified. A patch is available to address this issue.