The type confusion vulnerability allows a guest-to-host sandbox escape which can lead to remote code execution ...
Java developers have spent decades working with a basic assumption about objects: every object has its own identity. Now, OpenJDK developers are preparing to loosen that rule with JDK 28.