Login Request a demo
JR
Product
Jre
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
817
CVEs
14
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities817In the news0Timeline
Severity mix
Critical 40High 74Medium 159Low 107
Severity
All severities500Critical40High74Medium159Low107
Exploitation
On CISA KEV14Exploited in the wild14
Watch

Add Jre to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2016-3427
In wildKEV
9.8
92%
Apr 21
Oracle Java SE and JRockit Unspecified Vulnerability
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2015-2590
In wildKEV
9.8
25%
Jul 16
Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability
Affected: 1.6.0; 1.7.0; 1.7.0; 1.8.0; 1.8.0
CVE-2013-2465
RansomwareIn wildKEV
9.8
99%
Jun 18
Oracle Java SE Unspecified Vulnerability
Affected: 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +34 more
CVE-2013-0422
RansomwareIn wildKEV
9.8
97%
Jan 10
Oracle JRE Remote Code Execution Vulnerability
Affected: 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +4 more
CVE-2012-5076
In wildKEV
9.8
91%
Oct 16
Oracle Java SE Sandbox Bypass Vulnerability
Affected: 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +2 more
CVE-2012-4681
RansomwareIn wildKEV
9.8
99%
Aug 28
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more
CVE-2012-1723
RansomwareIn wildKEV
9.8
94%
Jun 16
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: through 1.4.2_37; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more
CVE-2012-0507
RansomwareIn wildKEV
9.8
98%
Jun 7
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +5 more
CVE-2011-3544
In wildKEV
9.8
97%
Oct 19
Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability
Affected: before 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more
CVE-2010-0840
In wildKEV
9.8
96%
Apr 1
Oracle JRE Unspecified Vulnerability
Affected: 1.4.2_25; 1.5.0; 1.6.0
CVE-2023-41993
In wildKEV
8.8
24%
Sep 21
Apple Multiple Products WebKit Code Execution Vulnerability
Affected: 1.8.0
CVE-2015-4902
In wildKEV
5.3
14%
Oct 21
Oracle Java SE Integrity Check Vulnerability
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2013-2423
In wildKEV
3.7
85%
Apr 17
Oracle JRE Unspecified Vulnerability
Affected: 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +7 more
CVE-2013-0431
RansomwareIn wildKEV
3.7
90%
Jan 31
Oracle JRE Sandbox Bypass Vulnerability
Affected: 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; 1.7.0; +5 more
CVE-2016-9843
9.8
6%
May 23
The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-9841
9.8
8%
May 23
inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10346
9.6
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10285
9.6
3%
Oct 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 1.6.0; 1.7.0; 1.8.0; 1.9.0
CVE-2017-10111
9.6
2%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.8.0
CVE-2017-10110
9.6
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10107
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10101
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10096
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10090
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.7.0; 1.8.0
CVE-2017-10089
9.6
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10087
9.6
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10086
9.6
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX)
Affected: 1.7.0; 1.8.0
CVE-2017-3289
9.6
2%
Jan 27
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot)
Affected: 1.7; 1.8; 1.8
CVE-2017-3272
9.6
3%
Jan 27
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries)
Affected: 1.6; 1.7; 1.8; 1.8
CVE-2016-5582
9.6
5%
Oct 25
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via…
Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0
CVE-2016-5568
9.6
4%
Oct 25
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-5556
9.6
5%
Oct 25
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, and 8u102 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-3610
9.6
6%
Jul 21
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to…
Affected: 1.8.0; 1.8.0
CVE-2016-3606
9.6
4%
Jul 21
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors…
Affected: 1.7.0; 1.8.0; 1.8.0
CVE-2016-3598
9.6
7%
Jul 21
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to…
Affected: 1.8.0; 1.8.0
CVE-2016-3587
9.6
6%
Jul 21
Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to…
Affected: 1.8.0; 1.8.0
CVE-2016-3443
9.6
5%
Apr 21
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to 2D
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-0687
9.6
5%
Apr 21
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via…
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-0686
9.6
5%
Apr 21
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via…
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2019-2699
9.0
3%
Apr 23
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL)
Affected: 1.8.0
CVE-2018-3183
9.0
3%
Oct 17
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Scripting)
Affected: 1.8.0; 11.0.0
CVE-2018-2938
9.0
2%
Jul 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10102
9.0
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-3241
9.0
33%
Jan 27
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI)
Affected: 1.6; 1.7; 1.8; 1.8
CVE-2016-9842
8.8
5%
May 23
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-9840
8.8
5%
May 23
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2025-50059
8.6
1%
Jul 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)
Affected: 1.8.0; 1.8.0; 11.0.27; 17.0.15; 21.0.7; 24.0.1
CVE-2020-14664
8.3
4%
Jul 15
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)
Affected: 1.8.0
CVE-2020-14583
8.3
4%
Jul 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 1.7.0; 1.8.0; 11.0.7; 14.0.1
CVE-2020-2805
8.3
4%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0
Page 1 of 10 · 500 total
12…10
The 500 most important CVEs for this product (exploited first, then by severity)