CVE-2024-20952 is a high-severity vulnerability affecting Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition in specific versions. It involves a security flaw in the Java sandbox that can be exploited by unauthenticated attackers with network access via multiple protocols. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data or complete access to all accessible data. This vulnerability primarily affects Java deployments running untrusted code, such as sandboxed Java Web Start applications or applets, and does not impact server deployments running only trusted code. The vulnerability has a CVSS 3.1 base score of 7.4, indicating a high impact on confidentiality and integrity. Oracle has released patches for this and other vulnerabilities in their January 2024 Critical Patch Update.