Login Request a demo
JD
Product
Jdk
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
804
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities804In the news0Timeline
Severity mix
Critical 37High 77Medium 162Low 107
Severity
All severities500Critical37High77Medium162Low107
Exploitation
On CISA KEV8Exploited in the wild8
Watch

Add Jdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-3427
In wildKEV
9.8
92%
Apr 21
Oracle Java SE and JRockit Unspecified Vulnerability
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2015-2590
In wildKEV
9.8
25%
Jul 16
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Affected: 1.6.0; 1.7.0; 1.7.0; 1.8.0; 1.8.0
CVE-2013-0422
RansomwareIn wildKEV
9.8
97%
Jan 10
Oracle JRE Remote Code Execution Vulnerability
Affected: 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +4 more
CVE-2012-4681
RansomwareIn wildKEV
9.8
99%
Aug 28
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more
CVE-2012-1723
RansomwareIn wildKEV
9.8
94%
Jun 16
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: through 1.4.2_37; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more
CVE-2011-3544
In wildKEV
9.8
97%
Oct 19
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: before 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more
CVE-2019-11068
9.8
5%
Apr 10
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code
Affected: 8.0
CVE-2016-9843
9.8
6%
May 23
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-9841
9.8
8%
May 23
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10346
9.6
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10285
9.6
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10111
9.6
2%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.8.0
CVE-2017-10110
9.6
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10107
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10101
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10096
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10090
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.7.0; 1.8.0
CVE-2017-10089
9.6
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10087
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10086
9.6
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX)
Affected: 1.7.0; 1.8.0
CVE-2017-3289
9.6
2%
Jan 27
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot)
Affected: 1.7; 1.8; 1.8
CVE-2017-3272
9.6
3%
Jan 27
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.6; 1.7; 1.8; 1.8
CVE-2016-5582
9.6
5%
Oct 25
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via…
Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0
CVE-2016-5568
9.6
4%
Oct 25
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-5556
9.6
5%
Oct 25
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-3610
9.6
6%
Jul 21
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to…
Affected: 1.8.0; 1.8.0
CVE-2016-3606
9.6
4%
Jul 21
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors…
Affected: 1.7.0; 1.8.0; 1.8.0
CVE-2016-3598
9.6
7%
Jul 21
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to…
Affected: 1.8.0; 1.8.0
CVE-2016-3587
9.6
6%
Jul 21
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to…
Affected: 1.8.0; 1.8.0
CVE-2016-3443
9.6
5%
Apr 21
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-0687
9.6
5%
Apr 21
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via…
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-0686
9.6
5%
Apr 21
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via…
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2019-2699
9.0
3%
Apr 23
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL)
Affected: 1.8.0
CVE-2018-3183
9.0
3%
Oct 17
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting)
Affected: 1.8.0; 11.0.0
CVE-2018-2938
9.0
2%
Jul 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10102
9.0
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-3241
9.0
33%
Jan 27
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI)
Affected: 1.6; 1.7; 1.8; 1.8
Showing 37
The 500 most important CVEs for this product (exploited first, then by severity)