CVE-2024-20918 is a vulnerability in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition affecting specific versions. It allows an unauthenticated attacker with network access via multiple protocols to potentially compromise the affected products by unauthorized creation, deletion, or modification of critical data. The vulnerability involves APIs in the Hotspot component and can be exploited through web services supplying data to these APIs. It also affects sandboxed Java Web Start applications or applets running untrusted code relying on the Java sandbox. The CVSS 3.1 base score is 7.4, indicating high severity with confidentiality and integrity impacts. Oracle has released patches as part of their January 2024 Critical Patch Update and strongly recommends applying these updates promptly.