diff --git a/21/alpine/hotspot/Dockerfile b/21/alpine/hotspot/Dockerfile
index 2e8725f113..9c49a07496 100644
--- a/21/alpine/hotspot/Dockerfile
+++ b/21/alpine/hotspot/Dockerfile
@@ -2,7 +2,7 @@ ARG ALPINE_TAG=3.19.1
 
 FROM alpine:"${ALPINE_TAG}" AS jre-build
 
-ARG JAVA_VERSION=21.0.2_13
+ARG JAVA_VERSION=21.0.3_9
 
 SHELL ["/bin/ash", "-o", "pipefail", "-c"]
 
diff --git a/21/debian/bookworm-slim/hotspot/Dockerfile b/21/debian/bookworm-slim/hotspot/Dockerfile
index b0c371efa0..325656fb5a 100644
--- a/21/debian/bookworm-slim/hotspot/Dockerfile
+++ b/21/debian/bookworm-slim/hotspot/Dockerfile
@@ -2,7 +2,7 @@ ARG BOOKWORM_TAG=20240408
 
 FROM debian:bookworm-"${BOOKWORM_TAG}"-slim as jre-build
 
-ARG JAVA_VERSION=21.0.2_13
+ARG JAVA_VERSION=21.0.3_9
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
diff --git a/21/debian/bookworm/hotspot/Dockerfile b/21/debian/bookworm/hotspot/Dockerfile
index 584ca46f8b..dd97deea1e 100644
--- a/21/debian/bookworm/hotspot/Dockerfile
+++ b/21/debian/bookworm/hotspot/Dockerfile
@@ -2,7 +2,7 @@ ARG BOOKWORM_TAG=20240408
 
 FROM debian:bookworm-"${BOOKWORM_TAG}" as jre-build
 
-ARG JAVA_VERSION=21.0.2_13
+ARG JAVA_VERSION=21.0.3_9
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
diff --git a/21/rhel/ubi9/hotspot/Dockerfile b/21/rhel/ubi9/hotspot/Dockerfile
index cf5ccc26fb..8f5aefee02 100644
--- a/21/rhel/ubi9/hotspot/Dockerfile
+++ b/21/rhel/ubi9/hotspot/Dockerfile
@@ -1,6 +1,6 @@
 FROM registry.access.redhat.com/ubi9/ubi:9.3-1610 as jre-build
 
-ARG JAVA_VERSION=21.0.2_13
+ARG JAVA_VERSION=21.0.3_9
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
diff --git a/docker-bake.hcl b/docker-bake.hcl
index 425e161559..94c8c1898b 100644
--- a/docker-bake.hcl
+++ b/docker-bake.hcl
@@ -101,7 +101,7 @@ variable "JAVA17_VERSION" {
 }
 
 variable "JAVA21_VERSION" {
-  default = "21.0.2_13"
+  default = "21.0.3_9"
 }
 
 variable "BOOKWORM_TAG" {