JD
Product
Jdk
On CISA KEVExploited in the wildRansomware-linked
804
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 77Medium 162Low 107
Watch
Add Jdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-2816 | 4.8 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.3; 12.0.1 |
| CVE-2018-2599 | 4.8 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2024-20945 | 4.7 | Feb 17 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 1.8.0; 1.8.0; 11.0.21; 17.0.9; 21.0.1 |
| CVE-2019-2999 | 4.7 | Oct 16 | Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2018-2581 | 4.7 | Jan 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: 1.7.0; 1.8.0; 9.0.1 |
| CVE-2018-2602 | 4.5 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: I18n) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2021-2369 | 4.3 | Jul 21 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library) Affected: 1.7.0; 1.8.0; 11.0.11; 16.0.1 |
| CVE-2018-2940 | 4.3 | Jul 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 1.6.0; 1.7.0; 1.8.0; 10.0.1 |
| CVE-2018-2678 | 4.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2018-2677 | 4.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2018-2663 | 4.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2018-2588 | 4.3 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: LDAP) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2017-10105 | 4.3 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-10081 | 4.3 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3261 | 4.3 | Jan 27 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 1.6; 1.7; 1.8; 1.8 |
| CVE-2017-3231 | 4.3 | Jan 27 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 1.6; 1.7; 1.8; 1.8 |
| CVE-2016-5554 | 4.3 | Oct 25 | Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to JMX Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2016-3550 | 4.3 | Jul 21 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality via vectors related to Hotspot Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2016-3458 | 4.3 | Jul 21 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; and Java SE Embedded 8u91 allows remote attackers to affect integrity via vectors related to CORBA Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-3425 | 4.3 | Apr 21 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect availability via vectors related to… Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-3422 | 4.3 | Apr 21 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect availability via vectors related to 2D Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2020-14792 | 4.2 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot) Affected: 1.7.0; 1.8.0; 11.0.8; 15 |
| CVE-2019-2996 | 4.2 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment) Affected: 1.8.0 |
| CVE-2018-2800 | 4.2 | Apr 19 | Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: RMI) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3509 | 4.2 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 1.6; 1.7; 1.8 |
| CVE-2017-10295 | 4.0 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2026-47059 | 3.7 | Jul 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 1.8.0; 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; +1 more |
| CVE-2026-47010 | 3.7 | Jul 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: 1.8.0; 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; +1 more |
| CVE-2026-22018 | 3.7 | Apr 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.30; 17.0.18; 21.0.10; +2 more |
| CVE-2026-22008 | 3.7 | Apr 21 | Vulnerability in Oracle Java SE (component: Libraries) Affected: 25.0.1 |
| CVE-2025-61748 | 3.7 | Oct 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 21.0.8; 25 |
| CVE-2025-30752 | 3.7 | Jul 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler) Affected: 24.0.1 |
| CVE-2024-21217 | 3.7 | Oct 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: 1.8.0; 1.8.0; 11.0.24; 17.0.12; 21.0.4; 23 |
| CVE-2024-21211 | 3.7 | Oct 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler) Affected: 23 |
| CVE-2024-21210 | 3.7 | Oct 15 | Vulnerability in Oracle Java SE (component: Hotspot) Affected: 1.8.0; 1.8.0; 11.0.24; 17.0.12; 21.0.4; 23 |
| CVE-2024-21208 | 3.7 | Oct 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 1.8.0; 1.8.0; 11.0.24; 17.0.12; 21.0.4; 23 |
| CVE-2024-21144 | 3.7 | Jul 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency) Affected: 1.8.0; 1.8.0; 11.0.23 |
| CVE-2024-21138 | 3.7 | Jul 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 1.8.0; 11.0.23; 17.0.11; 21.0.3; 22.0.1 |
| CVE-2024-21131 | 3.7 | Jul 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 1.8.0; 11.0.23; 17.0.11; 21.0.3; 22.0.1 |
| CVE-2024-21094 | 3.7 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 11.0.22; 17.0.10; 21.0.2; 22.0.1 |
| CVE-2024-21085 | 3.7 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency) Affected: 1.8.0; 11.0.22 |
| CVE-2024-21068 | 3.7 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 11.0.22; 17.0.10; 21.0.2; 22.0.1 |
| CVE-2024-21012 | 3.7 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 11.0.22; 17.0.10; 21.0.2; 22.0.1 |
| CVE-2024-21011 | 3.7 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 11.0.22; 17.0.10; 21.0.2; 22.0.1 |
| CVE-2023-22025 | 3.7 | Oct 17 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 17.0.8; 21.0.0 |
| CVE-2023-22049 | 3.7 | Jul 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries) Affected: 1.8.0; 1.8.0; 11.0.19; 17.0.7; 20.0.1 |
| CVE-2023-22045 | 3.7 | Jul 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 1.8.0; 11.0.19; 17.0.7; 20.0.1 |
| CVE-2023-22044 | 3.7 | Jul 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 17.0.7; 20.0.1 |
| CVE-2023-22036 | 3.7 | Jul 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility) Affected: 11.0.19; 17.0.7; 20.0.1 |
| CVE-2023-21968 | 3.7 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 1.8.0; 11.0.18; 17.0.6; 20 |
The 500 most important CVEs for this product (exploited first, then by severity)
