JD
Product
Jdk
On CISA KEVExploited in the wildRansomware-linked
804
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 77Medium 162Low 107
Watch
Add Jdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2583 | 3.7 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 1.7.0; 1.8.0; 11.0.5; 13.0.1 |
| CVE-2019-2992 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2988 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2987 | 3.7 | Oct 16 | Vulnerability in the Java SE product of Oracle Java SE (component: 2D) Affected: 11.0.4; 13.0.0 |
| CVE-2019-2983 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2981 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2978 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2973 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2964 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2962 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2894 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2842 | 3.7 | Jul 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE) Affected: 1.8.0 |
| CVE-2019-2426 | 3.7 | Jan 16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking) Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.1 |
| CVE-2018-3157 | 3.7 | Oct 17 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound) Affected: 11.0.0 |
| CVE-2018-3150 | 3.7 | Oct 17 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility) Affected: 11.0.0 |
| CVE-2018-2952 | 3.7 | Jul 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency) Affected: 1.6.0; 1.7.0; 1.8.0; 10.0.1 |
| CVE-2018-2579 | 3.7 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2017-3544 | 3.7 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3533 | 3.7 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3259 | 3.7 | Jan 27 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 1.6; 1.7; 1.8 |
| CVE-2016-8328 | 3.7 | Jan 27 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control) Affected: 1.8 |
| CVE-2015-4000 | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: 1.6.0; 1.7.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2019-2786 | 3.4 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.8.0; 1.8.0; 11.0.3; 12.0.1 |
| CVE-2018-3136 | 3.4 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0; 11.0.0 |
| CVE-2026-60166 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-60164 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-47035 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-47034 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-47030 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-21947 | 3.1 | Jan 20 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-21005 | 3.1 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-21003 | 3.1 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-20925 | 3.1 | Feb 17 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-20923 | 3.1 | Feb 17 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2023-22006 | 3.1 | Jul 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking) Affected: 11.0.19; 17.0.7; 20.0.1 |
| CVE-2021-2341 | 3.1 | Jul 21 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 1.7.0; 1.8.0; 11.0.11; 16.0.1 |
| CVE-2020-14798 | 3.1 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.8; 15 |
| CVE-2020-14796 | 3.1 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.8; 15 |
| CVE-2019-2945 | 3.1 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2933 | 3.1 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2818 | 3.1 | Jul 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: 11.0.3; 12.0.1 |
| CVE-2019-2766 | 3.1 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.3; 12.0.1 |
| CVE-2019-2422 | 3.1 | Jan 16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: 1.7.0; 1.8.0; 11.0.1 |
| CVE-2019-2449 | 3.1 | Jan 16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 1.8.0 |
| CVE-2018-3139 | 3.1 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0; 11.0.0 |
| CVE-2018-2790 | 3.1 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0; 10 |
| CVE-2017-10345 | 3.1 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10193 | 3.1 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3539 | 3.1 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-5542 | 3.1 | Oct 25 | Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
