JD
Product
Jdk
On CISA KEVExploited in the wildRansomware-linked
804
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 77Medium 162Low 107
Watch
Add Jdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-2942 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL) Affected: 1.7.0; 1.8.0 |
| CVE-2018-2941 | 8.3 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 1.7.0; 1.8.0; 10.0.1 |
| CVE-2018-2826 | 8.3 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: 10 |
| CVE-2018-2825 | 8.3 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: 10 |
| CVE-2018-2814 | 8.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 1.6.0; 1.7.0; 1.8.0; 10 |
| CVE-2018-2639 | 8.3 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 1.8.0; 9.0.1 |
| CVE-2018-2638 | 8.3 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 1.8.0; 9.0.1 |
| CVE-2018-2633 | 8.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2017-10116 | 8.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-10114 | 8.3 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 1.7.0; 1.8.0 |
| CVE-2017-10074 | 8.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3514 | 8.3 | Apr 24 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: 1.6; 1.7; 1.8 |
| CVE-2017-3512 | 8.3 | Apr 24 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: 1.7.0; 1.8.0 |
| CVE-2017-3260 | 8.3 | Jan 27 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: 1.7; 1.8 |
| CVE-2016-5573 | 8.3 | Oct 25 | Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via… Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2016-3449 | 8.3 | Apr 21 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2025-50106 | 8.1 | Jul 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 1.8.0; 1.8.0; 11.0.27; 17.0.15; 21.0.7; 24.0.1 |
| CVE-2025-30749 | 8.1 | Jul 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 1.8.0; 1.8.0; 11.0.27; 17.0.15; 21.0.7; 24.0.1 |
| CVE-2020-2604 | 8.1 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 1.7.0; 1.8.0; 11.0.5; 13.0.1 |
| CVE-2019-2698 | 8.1 | Apr 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D) Affected: 1.7.0; 1.8.0 |
| CVE-2019-2697 | 8.1 | Apr 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D) Affected: 1.7.0; 1.8.0 |
| CVE-2017-10078 | 8.1 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting) Affected: 1.8.0 |
| CVE-2016-3552 | 8.1 | Jul 21 | Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install Affected: 1.8.0 |
| CVE-2016-0636 | 8.1 | Mar 24 | Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the… Affected: 1.7.0; 1.8.0; 1.8.0 |
| CVE-2026-62574 | 7.8 | Jul 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install) Affected: 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; 26.0.1 |
| CVE-2018-2794 | 7.7 | Apr 19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0; 10 |
| CVE-2018-2811 | 7.7 | Apr 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install) Affected: 1.8.0; 10 |
| CVE-2017-3511 | 7.7 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 1.6; 1.7; 1.8 |
| CVE-2016-3511 | 7.7 | Jul 21 | Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment Affected: 1.7.0; 1.8.0 |
| CVE-2016-3503 | 7.7 | Jul 21 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2026-47063 | 7.5 | Jul 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 1.8.0; 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; +1 more |
| CVE-2026-47057 | 7.5 | Jul 21 | Vulnerability in Oracle Java SE (component: Scripting) Affected: 1.8.0; 1.8.0; 11.0.31 |
| CVE-2026-34282 | 7.5 | Apr 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 1.8.0; 11.0.30; 17.0.18; 21.0.10; 25.0.2; 26 |
| CVE-2026-22016 | 7.5 | Apr 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.30; 17.0.18; 21.0.10; +2 more |
| CVE-2026-21945 | 7.5 | Jan 20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.29; 17.0.17; 21.0.9; +1 more |
| CVE-2025-53066 | 7.5 | Oct 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: 1.8.0; 1.8.0; 11.0.28; 17.0.16; 21.0.8; 25 |
| CVE-2024-20932 | 7.5 | Jan 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 17.0.9 |
| CVE-2022-34169 | 7.5 | Jul 19 | The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets Affected: 1.7.0; 1.8.0; 11.0.15.1; 17.0.3.1; 18.0.1.1 |
| CVE-2022-21476 | 7.5 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 7.0; 8.0; 11.0.14; 17.0.2; 18 |
| CVE-2022-21449 | 7.5 | Apr 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 17.0.2; 18 |
| CVE-2021-2388 | 7.5 | Jul 21 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 11.0.11; 16.0.1 |
| CVE-2020-2816 | 7.5 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11.0.6; 14.0.0 |
| CVE-2012-4420 | 7.5 | Dec 26 | An information disclosure flaw was found in the way the Java Virtual Machine (JVM) implementation of Java SE 7 as provided by OpenJDK 7 incorrectly initialized integer arrays… Affected: 7.0 |
| CVE-2019-2602 | 7.5 | Apr 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.2; 12 |
| CVE-2018-2627 | 7.5 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Installer) Affected: 1.8.0; 9.0.1 |
| CVE-2017-10388 | 7.5 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10176 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 1.7.0; 1.8.0 |
| CVE-2017-10118 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 1.7.0; 1.8.0 |
| CVE-2017-10115 | 7.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-10067 | 7.5 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
