JR
Product
Jre
On CISA KEVExploited in the wildRansomware-linked
817
CVEs
14
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 40High 74Medium 159Low 107
Watch
Add Jre to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-21937 | 3.7 | Apr 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 1.8.0; 11.0.18; 17.0.6; 20 |
| CVE-2023-21843 | 3.7 | Jan 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound) Affected: 1.8.0; 11.0.17; 17.0.5; 19.0.1 |
| CVE-2022-21624 | 3.7 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI) Affected: 1.8.0; 1.8.0; 11.0.16.1; 17.0.4.1; 19 |
| CVE-2022-39399 | 3.7 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking) Affected: 11.0.16.1; 17.0.4.1; 19 |
| CVE-2022-21619 | 3.7 | Oct 18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security) Affected: 1.8.0; 1.8.0; 11.0.16.1; 17.0.4.1; 19 |
| CVE-2022-21248 | 3.7 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: 1.7.0; 1.8.0; 11.0.13; 17.0.1 |
| CVE-2020-14797 | 3.7 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.8; 15 |
| CVE-2020-14782 | 3.7 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.8; 15 |
| CVE-2020-14781 | 3.7 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI) Affected: 1.7.0; 1.8.0; 11.0.8; 15 |
| CVE-2020-14779 | 3.7 | Oct 21 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 1.7.0; 1.8.0; 11.0.8; 15 |
| CVE-2020-14581 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 1.8.0; 11.0.7; 14.0.1 |
| CVE-2020-14579 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0 |
| CVE-2020-14578 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0 |
| CVE-2020-14577 | 3.7 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: 1.7.0; 1.8.0; 11.0.7; 14.0.1 |
| CVE-2020-2778 | 3.7 | Apr 15 | Vulnerability in the Java SE product of Oracle Java SE (component: JSSE) Affected: 11.0.6; 14.0.0 |
| CVE-2020-2773 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0 |
| CVE-2020-2757 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0 |
| CVE-2020-2756 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0 |
| CVE-2020-2755 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 1.8.0; 11.0.6; 14.0.0 |
| CVE-2020-2754 | 3.7 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting) Affected: 1.8.0; 11.0.6; 14.0.0 |
| CVE-2020-2659 | 3.7 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 1.8.0 |
| CVE-2020-2654 | 3.7 | Jan 15 | Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: 1.7.0; 1.8.0; 11.0.5; 13.0.1 |
| CVE-2020-2590 | 3.7 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 1.7.0; 1.8.0; 11.0.5; 13.0.1 |
| CVE-2020-2583 | 3.7 | Jan 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 1.7.0; 1.8.0; 11.0.5; 13.0.1 |
| CVE-2019-2992 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2988 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2987 | 3.7 | Oct 16 | Vulnerability in the Java SE product of Oracle Java SE (component: 2D) Affected: 11.0.4; 13.0.0 |
| CVE-2019-2983 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2981 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2978 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2973 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2964 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2962 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2894 | 3.7 | Oct 16 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security) Affected: 1.7.0; 1.8.0; 11.0.4; 13.0.0 |
| CVE-2019-2842 | 3.7 | Jul 23 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JCE) Affected: 1.8.0 |
| CVE-2019-2426 | 3.7 | Jan 16 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Networking) Affected: 1.7.0; 1.8.0; 1.8.0; 11.0.1 |
| CVE-2018-3157 | 3.7 | Oct 17 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Sound) Affected: 11.0.0 |
| CVE-2018-3150 | 3.7 | Oct 17 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Utility) Affected: 11.0.0 |
| CVE-2018-2952 | 3.7 | Jul 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency) Affected: 1.6.0; 1.7.0; 1.8.0; 10.0.1 |
| CVE-2018-2579 | 3.7 | Jan 18 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries) Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1 |
| CVE-2017-3544 | 3.7 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3533 | 3.7 | Apr 24 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 1.6.0; 1.7.0; 1.8.0 |
| CVE-2017-3259 | 3.7 | Jan 27 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment) Affected: 1.6; 1.7; 1.8 |
| CVE-2016-8328 | 3.7 | Jan 27 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java Mission Control) Affected: 1.8 |
| CVE-2015-4000 | 3.7 | May 21 | The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows… Affected: 1.6.0; 1.7.0; 1.7.0; 1.8.0; 1.8.0 |
| CVE-2019-2786 | 3.4 | Jul 23 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.8.0; 1.8.0; 11.0.3; 12.0.1 |
| CVE-2018-3136 | 3.4 | Oct 17 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security) Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0; 11.0.0 |
| CVE-2026-60166 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-60164 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
| CVE-2026-47035 | 3.1 | Jul 21 | Vulnerability in Oracle Java SE (component: JavaFX) Affected: 1.8.0 |
The 500 most important CVEs for this product (exploited first, then by severity)