JR
Product
Jre
by Oracle · last CVE Jul 21, 2026
On CISA KEVExploited in the wildRansomware-linked
817
CVEs
14
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 40High 74Medium 159Low 107
Watch

Add Jre to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-41993
In wildKEV
8.8
24%
Sep 21
Apple Multiple Products WebKit Code Execution Vulnerability
Affected: 1.8.0
CVE-2016-9842
8.8
5%
May 23
The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2016-9840
8.8
5%
May 23
inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2025-50059
8.6
1%
Jul 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)
Affected: 1.8.0; 1.8.0; 11.0.27; 17.0.15; 21.0.7; 24.0.1
CVE-2020-14664
8.3
4%
Jul 15
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX)
Affected: 1.8.0
CVE-2020-14583
8.3
4%
Jul 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 1.7.0; 1.8.0; 11.0.7; 14.0.1
CVE-2020-2805
8.3
4%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0
CVE-2020-2803
8.3
6%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 1.7.0; 1.8.0; 11.0.6; 14.0.0
CVE-2018-3209
8.3
3%
Oct 17
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX)
Affected: 1.8.0
CVE-2018-3169
8.3
4%
Oct 17
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot)
Affected: 1.7.0; 1.8.0; 11.0.0
CVE-2018-3149
8.3
7%
Oct 17
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
Affected: 1.6.0; 1.7.0; 1.8.0; 11.0.0
CVE-2018-2964
8.3
3%
Jul 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)
Affected: 1.8.0; 10.0.1
CVE-2018-2942
8.3
2%
Jul 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL)
Affected: 1.7.0; 1.8.0
CVE-2018-2941
8.3
3%
Jul 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX)
Affected: 1.7.0; 1.8.0; 10.0.1
CVE-2018-2826
8.3
5%
Apr 19
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries)
Affected: 10
CVE-2018-2825
8.3
4%
Apr 19
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Libraries)
Affected: 10
CVE-2018-2814
8.3
4%
Apr 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot)
Affected: 1.6.0; 1.7.0; 1.8.0; 10
CVE-2018-2639
8.3
3%
Jan 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)
Affected: 1.8.0; 9.0.1
CVE-2018-2638
8.3
3%
Jan 18
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment)
Affected: 1.8.0; 9.0.1
CVE-2018-2633
8.3
6%
Jan 18
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JNDI)
Affected: 1.6.0; 1.7.0; 1.8.0; 9.0.1
CVE-2017-10116
8.3
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-10114
8.3
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX)
Affected: 1.7.0; 1.8.0
CVE-2017-10074
8.3
3%
Aug 8
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot)
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2017-3514
8.3
2%
Apr 24
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT)
Affected: 1.6; 1.7; 1.8
CVE-2017-3512
8.3
3%
Apr 24
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT)
Affected: 1.7.0; 1.8.0
CVE-2017-3260
8.3
2%
Jan 27
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT)
Affected: 1.7; 1.8
CVE-2016-5573
8.3
3%
Oct 25
Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via…
Affected: 1.6.0; 1.7.0; 1.8.0; 1.8.0
CVE-2016-3449
8.3
4%
Apr 21
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Deployment
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2025-50106
8.1
1%
Jul 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D)
Affected: 1.8.0; 1.8.0; 11.0.27; 17.0.15; 21.0.7; 24.0.1
CVE-2025-30749
8.1
1%
Jul 15
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D)
Affected: 1.8.0; 1.8.0; 11.0.27; 17.0.15; 21.0.7; 24.0.1
CVE-2020-2604
8.1
5%
Jan 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)
Affected: 1.8.0
CVE-2019-2698
8.1
12%
Apr 23
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D)
Affected: 1.7.0; 1.8.0
CVE-2019-2697
8.1
11%
Apr 23
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D)
Affected: 1.7.0; 1.8.0
CVE-2017-10078
8.1
2%
Aug 8
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Scripting)
Affected: 1.8.0
CVE-2016-3552
8.1
0%
Jul 21
Unspecified vulnerability in Oracle Java SE 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install
Affected: 1.8.0
CVE-2016-0636
8.1
6%
Mar 24
Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the…
Affected: 1.7.0; 1.8.0; 1.8.0
CVE-2026-62574
7.8
0%
Jul 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Install)
Affected: 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; 26.0.1
CVE-2018-2794
7.7
1%
Apr 19
Vulnerability in the Java SE, JRockit component of Oracle Java SE (subcomponent: Security)
Affected: 1.6.0; 1.7.0; 1.8.0; 10
CVE-2018-2811
7.7
0%
Apr 19
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Install)
Affected: 1.8.0; 10
CVE-2017-3511
7.7
1%
Apr 24
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JCE)
Affected: 1.6; 1.7; 1.8
CVE-2016-3511
7.7
1%
Jul 21
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment
Affected: 1.7.0; 1.8.0
CVE-2016-3503
7.7
1%
Jul 21
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Install
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2026-47063
7.5
0%
Jul 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 1.8.0; 1.8.0; 11.0.31; 17.0.19; 21.0.11; 25.0.3; +1 more
CVE-2026-47057
7.5
0%
Jul 21
Vulnerability in Oracle Java SE (component: Scripting)
Affected: 1.8.0; 1.8.0; 11.0.31
CVE-2026-34282
7.5
1%
Apr 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)
Affected: 1.8.0; 11.0.30; 17.0.18; 21.0.10; 25.0.2; 26
CVE-2026-22016
7.5
1%
Apr 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)
Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.30; 17.0.18; 21.0.10; +2 more
CVE-2026-21945
7.5
1%
Jan 20
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)
Affected: 1.8.0; 1.8.0; 1.8.0; 11.0.29; 17.0.17; 21.0.9; +1 more
CVE-2025-53066
7.5
1%
Oct 21
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP)
Affected: 1.8.0; 1.8.0; 11.0.28; 17.0.16; 21.0.8; 25
CVE-2024-20932
7.5
1%
Jan 16
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security)
Affected: 17.0.9
CVE-2022-34169
7.5
82%
Jul 19
The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets
Affected: 1.7.0; 1.8.0; 11.0.15.1; 17.0.3.1; 18.0.1.1
Page 1 of 2 · 74 total
The 500 most important CVEs for this product (exploited first, then by severity)