JD
Product
Jdk
On CISA KEVExploited in the wildRansomware-linked
804
CVEs
8
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 37High 77Medium 162Low 107
Watch
Add Jdk to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4902 In wildKEV | 5.3 | Oct 21 | Oracle Java SE Integrity Check Vulnerability Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2021-35567 | 6.8 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 1.8.0; 11.0.12; 17 |
| CVE-2020-2601 | 6.8 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 1.7.0; 1.8.0; 11.0.5; 13.0.1 |
| CVE-2019-2989 | 6.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2949 | 6.8 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2018-2634 | 6.8 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JGSS) Affected: 1.7.0; 1.8.0; 9.0.1 |
| CVE-2017-10274 | 6.8 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Smart Card IO) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2017-10198 | 6.8 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2026-60526 | 6.7 | Jul 21 | Vulnerability in Oracle Java SE (component: Installation) Affected: 1.8.0; 1.8.0 |
| CVE-2018-3211 | 6.6 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serviceability) Affected: 1.8.0; 11.0.0 |
| CVE-2026-60147 | 6.5 | Jul 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 1.8.0; 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; +1 more |
| CVE-2019-16168 | 6.5 | Sep 9 | In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe… Affected: 1.8.0 |
| CVE-2018-14048 | 6.5 | Jul 13 | An issue has been found in libpng 1.6.34 Affected: 1.6.0; 1.7.0; 1.8.0; 11.0.0 |
| CVE-2018-13785 | 6.5 | Jul 9 | In libpng 1.6.34, a wrong calculation of row_factor in the png_check_chunk_length function (pngrutil.c) may trigger an integer overflow and resultant divide-by-zero while… Affected: 1.6.0; 1.7.0; 1.8.0; 11.0.0 |
| CVE-2018-11212 | 6.5 | May 16 | An issue was discovered in libjpeg 9a and 9d Affected: 1.7.0; 1.8.0; 11.0.1 |
| CVE-2018-2582 | 6.5 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: 1.8.0; 9.0.1 |
| CVE-2017-10243 | 6.5 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAX-WS) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2016-5549 | 6.5 | Jan 27 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 1.7; 1.8; 1.8 |
| CVE-2016-5548 | 6.5 | Jan 27 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 1.6; 1.7; 1.8; 1.8 |
| CVE-2017-10356 | 6.2 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2026-21933 | 6.1 | Jan 20 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.29; 17.0.17; 21.0.9; +1 more |
| CVE-2018-2641 | 6.1 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: AWT) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2017-10293 | 6.1 | Oct 19 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc) Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0 |
| CVE-2026-22003 | 6.0 | Apr 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 1.8.0 |
| CVE-2026-46968 | 5.9 | Jul 21 | Vulnerability in Oracle Java SE (component: JSSE) Affected: 1.8.0; 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; +1 more |
| CVE-2025-53057 | 5.9 | Oct 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 1.8.0; 1.8.0; 11.0.28; 17.0.16; 21.0.8; 25 |
| CVE-2025-30761 | 5.9 | Jul 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting) Affected: 1.8.0; 1.8.0; 11.0.27 |
| CVE-2024-20921 | 5.9 | Feb 17 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 1.8.0; 11.0.21; 17.0.9; 21.0.1 |
| CVE-2024-20919 | 5.9 | Feb 17 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 1.8.0; 11.0.21; 17.0.9; 21.0.1 |
| CVE-2024-20926 | 5.9 | Jan 16 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting) Affected: 1.8.0; 1.8.0; 11.0.21; 17.0.9; 21.0.1 |
| CVE-2023-22043 | 5.9 | Jul 18 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2023-21967 | 5.9 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: 1.8.0; 11.0.18; 17.0.6; 20 |
| CVE-2023-21954 | 5.9 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.8.0; 11.0.18; 17.0.6 |
| CVE-2022-21541 | 5.9 | Jul 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: 1.7.0; 1.8.0; 11.0.15.1; 17.0.3.1; 18.0.1.1 |
| CVE-2021-2161 | 5.9 | Apr 22 | Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.10; 16.0.0 |
| CVE-2020-2585 | 5.9 | Jan 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2019-2958 | 5.9 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2684 | 5.9 | Apr 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.2; 12 |
| CVE-2018-2973 | 5.9 | Jul 18 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE) Affected: 1.6.0; 1.7.0; 1.8.0; 10.0.1 |
| CVE-2018-2972 | 5.9 | Jul 18 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security) Affected: 10.0.1 |
| CVE-2018-2618 | 5.9 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2017-10135 | 5.9 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3526 | 5.9 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAXP) Affected: 1.6; 1.7; 1.8 |
| CVE-2016-5597 | 5.9 | Oct 25 | Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality via vectors related to Networking Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2016-0695 | 5.9 | Apr 21 | Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality via vectors related… Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3252 | 5.8 | Jan 27 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS) Affected: 1.6; 1.7; 1.8; 1.8 |
| CVE-2025-30698 | 5.6 | Apr 15 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 1.8.0; 1.8.0; 11.0.26; 17.0.14; 21.0.6; 24 |
| CVE-2018-3180 | 5.6 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JSSE) Affected: 1.6.0; 1.7.0; 1.8.0; 11.0.0 |
| CVE-2026-47027 | 5.3 | Jul 21 | Vulnerability in Oracle Java SE (component: Libraries) Affected: 1.8.0; 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; +1 more |
| CVE-2026-47021 | 5.3 | Jul 21 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D) Affected: 1.8.0; 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; +1 more |
The 500 most important CVEs for this product (exploited first, then by severity)
