JD
Product
Jdk
On CISA KEVExploited in the wildRansomware-linked
804
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 77Medium 162Low 107
Watch
Add Jdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-2830 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0 |
| CVE-2020-2781 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0 |
| CVE-2019-2821 | 5.3 | Jul 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JSSE) Affected: 11.0.3; 12.0.1 |
| CVE-2019-2769 | 5.3 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities) Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.3; 12.0.1 |
| CVE-2019-2762 | 5.3 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Utilities) Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.3; 12.0.1 |
| CVE-2019-13118 | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… Affected: 1.8.0 |
| CVE-2019-7317 | 5.3 | Feb 4 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: 11.0.3; 12.0.1 |
| CVE-2018-3214 | 5.3 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Sound) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2018-2815 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 1.6.0; 1.7.0; 1.8.0; 10 |
| CVE-2018-2799 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP) Affected: 1.7.0; 1.8.0; 10 |
| CVE-2018-2798 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: AWT) Affected: 1.6.0; 1.7.0; 1.8.0; 10 |
| CVE-2018-2797 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JMX) Affected: 1.6.0; 1.7.0; 1.8.0; 10 |
| CVE-2018-2796 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency) Affected: 1.7.0; 1.8.0; 10 |
| CVE-2018-2795 | 5.3 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0; 10 |
| CVE-2018-2657 | 5.3 | Jan 18 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 1.6.0; 1.7.0 |
| CVE-2018-2629 | 5.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JGSS) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2018-2603 | 5.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2013-4578 | 5.3 | Dec 29 | jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by… Affected: 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +28 more |
| CVE-2017-10357 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10355 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10350 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10349 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10348 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10347 | 5.3 | Oct 19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10281 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10109 | 5.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-10108 | 5.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-10053 | 5.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: 2D) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3262 | 5.3 | Jan 27 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control) Affected: 1.8 |
| CVE-2016-5552 | 5.3 | Jan 27 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 1.6; 1.7; 1.8; 1.8 |
| CVE-2016-5547 | 5.3 | Jan 27 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: 1.7; 1.8; 1.8 |
| CVE-2016-3508 | 5.3 | Jul 21 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related… Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2016-3500 | 5.3 | Jul 21 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related… Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2016-3498 | 5.3 | Jul 21 | Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX Affected: 1.7.0; 1.8.0 |
| CVE-2023-22041 | 5.1 | Jul 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 11.0.19; 17.0.7; 20.0.1 |
| CVE-2019-2745 | 5.1 | Jul 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: 1.7.0; 1.8.0; 11.0.3 |
| CVE-2026-21925 | 4.8 | Jan 20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: RMI) Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.29; 17.0.17; 21.0.9; +1 more |
| CVE-2025-30754 | 4.8 | Jul 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 1.8.0; 1.8.0; 11.0.27; 17.0.15; 21.0.7; 24.0.1 |
| CVE-2025-30691 | 4.8 | Apr 15 | Vulnerability in Oracle Java SE (component: Compiler) Affected: 21.0.6; 24 |
| CVE-2025-21502 | 4.8 | Jan 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 11.0.25; 17.0.13; 21.0.5; 23.0.1 |
| CVE-2024-21235 | 4.8 | Oct 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 1.8.0; 11.0.24; 17.0.12; 21.0.4; 23 |
| CVE-2024-21145 | 4.8 | Jul 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 1.8.0; 1.8.0; 11.0.23; 17.0.11; 21.0.3; 22.0.1 |
| CVE-2024-21140 | 4.8 | Jul 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 1.8.0; 11.0.23; 17.0.11; 21.0.3; 22.0.1 |
| CVE-2020-14556 | 4.8 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.8.0; 11.0.7; 14.0.1 |
| CVE-2020-2800 | 4.8 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server) Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0 |
| CVE-2020-2767 | 4.8 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11.0.6; 14.0.0 |
| CVE-2020-2655 | 4.8 | Jan 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11.0.5; 13.0.1 |
| CVE-2020-2593 | 4.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 1.7.0; 1.8.0; 11.0.5; 13.0.1 |
| CVE-2019-2977 | 4.8 | Oct 16 | Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot) Affected: 11.0.4; 13.0.0 |
| CVE-2019-2975 | 4.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 1.8.0; 11.0.4; 13.0.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
