This latest version of Java, due to arrive as a production release on September 16, has 18 features. JDK 25 comes on the heels of JDK 24, a six-month-support release that arrived March 18.

A newly discovered zero-day vulnerability in the widely used Java logging library Apache Log4j is easy to exploit and enables attackers to gain full control of affected servers.