CVE-2016-3503

JDK: unspecified vulnerability fixed in 6u121, 7u111, and 8u101 (Install)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.

CVSS 3.0 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Rhel Extras Oracle Java

CVE-2016-3508

OpenJDK: missing entity replacement limits (JAXP, 8149962)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.

CVSS 3.0 · 5.3 Medium EPSS 4.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Jrockit and 3 more

CVE-2016-3511

JDK: unspecified vulnerability fixed in 7u111 and 8u101 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.

CVSS 3.0 · 7.7 High EPSS < 1% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Network Satellite and 2 more

CVE-2016-3550

OpenJDK: integer overflows in bytecode streams (Hotspot, 8152479)

Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.

CVSS 3.0 · 4.3 Medium EPSS 3.1% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Linux and 2 more

CVE-2016-3552

JDK: unspecified vulnerability fixed in 8u101 (Install)

Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.

CVSS 3.0 · 8.1 High EPSS < 1% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Rhel Extras Oracle Java

CVE-2016-3587

OpenJDK: insufficient protection of MethodHandle.invokeBasic() (Hotspot, 8154475)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.

CVSS 3.0 · 9.6 Critical EPSS 5.9% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Linux and 2 more

CVE-2016-3598

OpenJDK: incorrect handling of MethodHandles.dropArguments() argument (Libraries, 8155985)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610.

CVSS 3.0 · 9.6 Critical EPSS 6.7% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Linux and 4 more

CVE-2016-3606

OpenJDK: insufficient bytecode verification (Hotspot, 8155981)

Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.

CVSS 3.0 · 9.6 Critical EPSS 3.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Linux and 2 more

CVE-2016-3610

OpenJDK: insufficient value count check in MethodHandles.filterReturnValue() (Libraries, 8158571)

Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598.

CVSS 3.0 · 9.6 Critical EPSS 5.9% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Linux and 2 more

CVE-2016-5542

OpenJDK: missing algorithm restrictions for jar verification (Libraries, 8155973)

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.

CVSS 3.0 · 3.1 Low EPSS 2.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2016-5554

OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.

CVSS 3.0 · 4.3 Medium EPSS 3.1% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2016-5556

JDK: unspecified vulnerability fixed in 6u131, 7u121, and 8u111 (2D)

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.

CVSS 3.0 · 9.6 Critical EPSS 4.9% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Network Satellite and 2 more

CVE-2016-5568

OpenJDK: incorrect menu handling on Windows (AWT, 8158993)

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.

CVSS 3.0 · 9.6 Critical EPSS 3.9% KEV · Not listed

Vendors

Oracle

Products

Jdk Jre

CVE-2016-5573

OpenJDK: insufficient checks of JDWP packets (Hotspot, 8159519)

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.

CVSS 3.0 · 8.3 High EPSS 3.3% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2016-5582

OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573.

CVSS 3.0 · 9.6 Critical EPSS 5.2% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 1 more

CVE-2013-2459

OpenJDK: Various AWT integer overflow checks (AWT, 8009071)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "integer overflow checks."

CVSS 2.0 · 10.0 Critical EPSS 7.4% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Jdk Jre Enterprise Linux and 5 more

CVE-2012-2739

java: hash table collisions CPU usage DoS (oCERT-2011-003)

Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a hash table.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed

Vendors

Oracle

Products

Jdk Jre Openjdk

CVE-2013-5846

JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

CVSS 2.0 · 9.3 Critical EPSS 3.6% KEV · Not listed

Vendors

Oracle Redhat

Products

Javafx Jdk Jre and 1 more

CVE-2013-5844

JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

CVSS 2.0 · 9.3 Critical EPSS 3.6% KEV · Not listed

Vendors

Oracle Redhat

Products

Javafx Jdk Jre and 1 more

CVE-2012-1726

OpenJDK: java.lang.invoke.MethodHandles.Lookup does not honor access modes (Libraries, 7165628)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

CVSS 2.0 · 6.4 Medium EPSS 2.5% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 1 more