Skip to content

Sun Microsystems · product

Java

13 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

  1. Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentialit…CVE-2010-0887Sun · 9.4% likely
  2. Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access file…CVE-2009-1102Sun · 4.6% likely

    CWE-94

  3. Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and…CVE-2009-1103Sun · 4.5% likely
  4. The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.CVE-1999-0440Sun · 3.6% likely
  5. The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run…CVE-2009-1105Sun · 3.6% likely
  6. The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a use…CVE-2009-1107Sun · 2.8% likely
  7. Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."CVE-2005-2530Sun · 2.5% likely
  8. Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbi…CVE-2008-3440Sun · 2.4% likely

    CWE-94

  9. Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used…CVE-2005-2529Sun · 2.3% likely
  10. The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent…CVE-2009-1104Sun · 2.2% likely

    CWE-16

  11. Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Jav…CVE-2005-2738Sun · 1.8% likely
  12. Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a cra…CVE-2003-1134Sun · 0.8% likely
  13. Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a tem…CVE-2005-2527Sun · 0.3% likely

    CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.