JD
Product
Jdk
On CISA KEVExploited in the wildRansomware-linked
804
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 77Medium 162Low 107
Watch
Add Jdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-60166 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-60164 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-47035 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-47034 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-47030 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-21947 | 3.1 | Jan 20 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-21005 | 3.1 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-21003 | 3.1 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-20925 | 3.1 | Feb 17 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-20923 | 3.1 | Feb 17 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2023-22006 | 3.1 | Jul 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking) Affected: 11.0.19; 17.0.7; 20.0.1 |
| CVE-2021-2341 | 3.1 | Jul 21 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 1.7.0; 1.8.0; 11.0.11; 16.0.1 |
| CVE-2020-14798 | 3.1 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.8; 15 |
| CVE-2020-14796 | 3.1 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.8; 15 |
| CVE-2019-2945 | 3.1 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2933 | 3.1 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2818 | 3.1 | Jul 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: 11.0.3; 12.0.1 |
| CVE-2019-2766 | 3.1 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.3; 12.0.1 |
| CVE-2019-2422 | 3.1 | Jan 16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries) Affected: 1.7.0; 1.8.0; 11.0.1 |
| CVE-2019-2449 | 3.1 | Jan 16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 1.8.0 |
| CVE-2018-3139 | 3.1 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking) Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0; 11.0.0 |
| CVE-2018-2790 | 3.1 | Apr 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0; 10 |
| CVE-2017-10345 | 3.1 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Serialization) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10193 | 3.1 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3539 | 3.1 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-5542 | 3.1 | Oct 25 | Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2016-3426 | 3.1 | Apr 21 | Unspecified vulnerability in Oracle Java SE 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality via vectors related to JCE Affected: 1.8.0 |
| CVE-2026-34268 | 2.9 | Apr 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.30; 17.0.18; 21.0.10; +2 more |
| CVE-2026-22007 | 2.9 | Apr 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.30; 17.0.18; 21.0.10; +2 more |
| CVE-2016-3485 | 2.9 | Jul 21 | Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows local users to affect integrity via vectors related to… Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2024-21004 | 2.5 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-21002 | 2.5 | Apr 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2024-20922 | 2.5 | Jan 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JavaFX) Affected: 1.8.0; 1.8.0 |
| CVE-2016-0603 | – | Feb 8 | Unspecified vulnerability in the Java SE component in Oracle Java SE 6u111, 7u95, 8u71, and 8u72, when running on Windows, allows remote attackers to affect confidentiality,… Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-0448 | – | Jan 21 | Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to… Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-0494 | – | Jan 21 | Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect… Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-0483 | – | Jan 21 | Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and… Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-0475 | – | Jan 21 | Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to… Affected: 1.8.0 |
| CVE-2016-0466 | – | Jan 21 | Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows… Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-0402 | – | Jan 21 | Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect… Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2015-8126 | – | Nov 13 | Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x… Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2015-4916 | – | Oct 22 | Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than… Affected: 1.8.0 |
| CVE-2015-4908 | – | Oct 22 | Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than… Affected: 1.8.0 |
| CVE-2015-4906 | – | Oct 22 | Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX, a different… Affected: 1.8.0 |
| CVE-2015-4901 | – | Oct 22 | Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX Affected: 1.8.0 |
| CVE-2015-4871 | – | Oct 21 | Unspecified vulnerability in Oracle Java SE 7u85 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries Affected: 1.7.0 |
| CVE-2015-4868 | – | Oct 21 | Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors… Affected: 1.8.0; 1.8.0 |
| CVE-2015-4893 | – | Oct 21 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to… Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2015-4883 | – | Oct 21 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via… Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2015-4882 | – | Oct 21 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
The 500 most important CVEs for this product (exploited first, then by severity)
