Oracle Jdk vulnerabilities
778 known vulnerabilities affecting oracle/jdk.
Total CVEs
778
CISA KEV
8
actively exploited
Public exploits
25
Exploited in wild
10
Severity breakdown
CRITICAL196HIGH119MEDIUM343LOW118
Vulnerabilities
Page 17 of 39
CVE-2016-5568CRITICALCVSS 9.6v1.6.0v1.7.0+1 more2016-10-25
CVE-2016-5568 [CRITICAL] CWE-284 CVE-2016-5568: Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affec
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT.
nvd
CVE-2016-5556CRITICALCVSS 9.6v1.6.0v1.7.0+1 more2016-10-25
CVE-2016-5556 [CRITICAL] CWE-284 CVE-2016-5556: Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affec
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D.
nvd
CVE-2016-5582CRITICALCVSS 9.6v1.6.0v1.7.0+1 more2016-10-25
CVE-2016-5582 [CRITICAL] CVE-2016-5582: Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows r
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573.
nvd
CVE-2016-5573HIGHCVSS 8.3v1.6.0v1.7.0+1 more2016-10-25
CVE-2016-5573 [HIGH] CWE-264 CVE-2016-5573: Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows r
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.
nvd
CVE-2016-5597MEDIUMCVSS 5.9v1.6.0v1.7.0+1 more2016-10-25
CVE-2016-5597 [MEDIUM] CWE-200 CVE-2016-5597: Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows r
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking.
nvd
CVE-2016-5554MEDIUMCVSS 4.3v1.6.0v1.7.0+1 more2016-10-25
CVE-2016-5554 [MEDIUM] CVE-2016-5554: Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows r
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX.
nvd
CVE-2016-5542LOWCVSS 3.1v1.6.0v1.7.0+1 more2016-10-25
CVE-2016-5542 [LOW] CVE-2016-5542: Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows r
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.
nvd
CVE-2016-3587CRITICALCVSS 9.6v1.8.02016-07-21
CVE-2016-3587 [CRITICAL] CVE-2016-3587: Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers t
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
nvd
CVE-2016-3610CRITICALCVSS 9.6v1.8.02016-07-21
CVE-2016-3610 [CRITICAL] CVE-2016-3610: Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers t
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598.
nvd
CVE-2016-3606CRITICALCVSS 9.6v1.7.0v1.8.02016-07-21
CVE-2016-3606 [CRITICAL] CVE-2016-3606: Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote a
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot.
nvd
CVE-2016-3598CRITICALCVSS 9.6v1.8.02016-07-21
CVE-2016-3598 [CRITICAL] CVE-2016-3598: Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers t
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610.
nvd
CVE-2016-3511HIGHCVSS 7.7v1.7.0v1.8.02016-07-21
CVE-2016-3511 [HIGH] CVE-2016-3511: Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidential
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.
nvd
CVE-2016-3552HIGHCVSS 8.1v1.8.02016-07-21
CVE-2016-3552 [HIGH] CVE-2016-3552: Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integ
Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
nvd
CVE-2016-3503HIGHCVSS 7.7v1.6.0v1.7.0+1 more2016-07-21
CVE-2016-3503 [HIGH] CVE-2016-3503: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect conf
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install.
nvd
CVE-2016-3500MEDIUMCVSS 5.3v1.6.0v1.7.0+1 more2016-07-21
CVE-2016-3500 [MEDIUM] CVE-2016-3500: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRock
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.
nvd
CVE-2016-3508MEDIUMCVSS 5.3v1.6.0v1.7.0+1 more2016-07-21
CVE-2016-3508 [MEDIUM] CVE-2016-3508: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRock
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.
nvd
CVE-2016-3550MEDIUMCVSS 4.3v1.6.0v1.7.0+1 more2016-07-21
CVE-2016-3550 [MEDIUM] CVE-2016-3550: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot.
nvd
CVE-2016-3498MEDIUMCVSS 5.3v1.7.0v1.8.02016-07-21
CVE-2016-3498 [MEDIUM] CVE-2016-3498: Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availab
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX.
nvd
CVE-2016-3458MEDIUMCVSS 4.3v1.6.0v1.7.0+1 more2016-07-21
CVE-2016-3458 [MEDIUM] CVE-2016-3458: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA.
nvd
CVE-2016-3485LOWCVSS 2.9v1.6.0v1.7.0+1 more2016-07-21
CVE-2016-3485 [LOW] CVE-2016-3485: Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRock
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows local users to affect integrity via vectors related to Networking.
nvd