Microsoft warns of security vulnerability in Minecraft Java Eurogamer.net If you click on a link and make a purchase we may receive a small commission. Read our editorial policy. Microsoft warns of security vulnerability in Minecraft Java Users must update now to secure their game. News by Tom Phillips Deputy Editor Updated on 13 Dec 2021 1 comment Microsoft has urged all Minecraft Java owners to update their game now to avoid a nasty security vulnerability. The issue allows for remote code execution on Minecraft servers by pasting messages into a chat box, and was flagged online by tech security analysts last Friday. Eurogamer contacted Microsoft at the time. On Sunday, Microsoft responded with a blog post on the Minecraft blog, and told all Java users to update their games immediately. Watch on YouTube For most, this will be as simple as restarting their games to get the new update - but those on modified clients and third-party launchers may need to do more. There's more details on the Minecraft blog. This log4j (CVE-2021-44228) vulnerability is extremely bad. Millions of applications use Log4j for logging, and all the attacker needs to do is get the app to log a special string. So far iCloud, Steam, and Minecraft have all been confirmed vulnerable.- Marcus Hutchins (@MalwareTechBlog) December 10, 2021 To see this content please enable targeting cookies. Manage cookie settings Player safety is the top priority for us. Unfortunately, earlier today we identified a security vulnerability in Minecraft: Java Edition.The issue is patched, but please follow these steps to secure your game client and/or servers. Please RT to amplify.https://t.co/4Ji8nsvpHf- Minecraft (@Minecraft) December 10, 2021 To see this content please enable targeting cookies. Manage cookie settings "Player safety is the top priority for us," Microsoft wrote in a tweet from the official Minecraft account. "Unfortunately, earlier today we identified a security vulnerability in Minecraft: Java Edition. "The issue is patched, but please follow these steps to secure your game client and/or servers. Please RT to amplify." There's no known issue associated with the Bedrock version of the Minecraft available for Windows 10 and 11, as well as consoles. Become a Eurogamer subscriber and get your first month for £1 Get your first month for £1 (normally £3.99) when you buy a Standard Eurogamer subscription. Enjoy ad-free browsing, merch discounts, our monthly letter from the editor, and show your support with a supporter-exclusive comment flair! Support us View supporter archive More News Google announces cloud gaming Chromebooks less than a fortnight after Stadia shutdown GeForce Now preinstalled. 4 Atari will hold RollerCoaster Tycoon rights for another decade Ups and downs. 7 Lady Dimitrescu will be a tad smaller in Resident Evil Village's Mercenaries DLC Level the playing field. 1 Overwatch 2 suffers another DDoS attack and character roster bugs Mei Mei. 13 Latest Articles Digital Foundry Nvidia GeForce RTX 4090: a new level in graphics performance The Digital Foundry video review - and how the new GPU champion delivers for 4K 120fps gaming. Feature Evercore Heroes wants to wind people up the right way "There's less rage at them, because they didn't end your fun." Google announces cloud gaming Chromebooks less than a fortnight after Stadia shutdown GeForce Now preinstalled. 4 Genshin Impact Path of Gleaming Jade dates, login event rewards Including other anniversary rewards and how to claim them. Supporters Only Premium only Off Topic: Take a minute to appreciate Cookin' with Coolio's incredible scallops recipe. What a great book. Premium only Off Topic: Reading City of Glass in comic form "Where exactly am I going?" Premium only Off Topic: Il Buco is a transporting film about a really big hole Underlands. Off-Topic Netflix handled Sandman brilliantly It was Dreamy. 9 Buy things with globes on them And other lovely Eurogamer merch in our official store! Explore our store