Security feed

24 October 2026

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code. CISA required action: Apply updates per vendor instructions.

Announced 3 Mar 2022

Java SE CVE-2012-0507

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-0507

Java SE

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-0507
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2860 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:50 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot. CISA required action: Apply updates per vendor instructions.

Announced 3 Mar 2022

Java SE CVE-2012-1723

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-1723

Java SE

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-1723
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2857 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:48 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution. CISA required action: Apply updates per vendor instructions.

Announced 3 Mar 2022

Java SE CVE-2012-4681

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-4681

Java SE

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-4681
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2856 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:47 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability

An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution. CISA required action: Apply updates per vendor instructions.

Announced 3 Mar 2022

Java SE CVE-2015-2590

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-2590

Java SE

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-2590
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2842 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:38 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Java SE Integrity Check Vulnerability

Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment. CISA required action: Apply updates per vendor instructions.

Announced 3 Mar 2022

Java SE CVE-2015-4902

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2015-4902

Java SE

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2015-4902
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2839 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:25:36 GMT
Publisher date: Thu, 03 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Java SE Sandbox Bypass Vulnerability

The default Java security properties configuration did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions. CISA required action: Apply updates per vendor instructions.

Announced 28 Mar 2022

Java SE CVE-2012-5076

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2012-5076

Java SE

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2012-5076
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2680 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:26 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement

advisoryKnown exploited CVECISA Known Exploited Vulnerabilities24 Oct 2026

Oracle Java SE Unspecified Vulnerability

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to 2D CISA required action: Apply updates per vendor instructions.

Announced 28 Mar 2022

Java SE CVE-2013-2465

Structured advisory · Revision 1Original source

Evidence and details

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2013-2465

Java SE

Source reference: /product

Affected versions: Not stated in this record
Fixed versions: Not stated in this record
Prerequisites: Not stated in this record

Related CVEs: CVE-2013-2465
Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event: #2677 · Revision 1
Added to Heist Feed: Sat, 24 Oct 2026 21:22:24 GMT
Publisher date: Mon, 28 Mar 2022 00:00:00 GMT

Read the original announcement