CVE-2024-20923 is a low-severity vulnerability in the JavaFX component of Oracle Java SE and Oracle GraalVM Enterprise Edition. It affects Oracle Java SE 8u391 and GraalVM Enterprise Edition versions 20.3.12 and 21.3.8. The flaw allows an unauthenticated attacker with network access to potentially gain unauthorized read access to some data, but requires user interaction from someone other than the attacker. This vulnerability primarily impacts client-side Java deployments running sandboxed Java Web Start applications or applets that load untrusted code. Server-side Java deployments running only trusted code are not affected. The CVSS 3.1 base score is 3.1, indicating low impact on confidentiality and no impact on integrity or availability.