Skip to content

Sun Microsystems · product

Java Se

14 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 14 is a mark on the map. Named now: 1 to 14, most at risk first.

  1. Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE…CVE-2009-2676Sun · 3.6% likely
  2. The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attac…CVE-2009-2476Sun · 2.9% likely

    CWE-264

  3. JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows c…CVE-2009-2689Sun · 2.8% likely

    CWE-264

  4. Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6429594. NOTE: this issue exists b…CVE-2009-2722Sun · 2.8% likely
  5. Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262.CVE-2009-2723Sun · 2.7% likely
  6. The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sens…CVE-2009-2690Sun · 2.6% likely

    CWE-264

  7. Multiple unspecified vulnerabilities in the Provider class in Sun Java SE 5.0 before Update 20 have unknown impact and attack vectors, aka BugId 6406003.CVE-2009-2721Sun · 2.4% likely
  8. Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variable…CVE-2009-2475Sun · 2.3% likely

    CWE-200

  9. The Java Web Start implementation in Sun Java SE 6 before Update 15 allows context-dependent attackers to cause a denial of service (NullPointerException) via a crafted .jnlp file…CVE-2009-2719Sun · 2.0% likely

    CWE-119

  10. Unspecified vulnerability in the javax.swing.plaf.synth.SynthContext.isSubregion method in the Swing implementation in Sun Java SE 6 before Update 15 allows context-dependent atta…CVE-2009-2720Sun · 2.0% likely
  11. The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on X11 does not impose the intended constraint on distance from the window border to the Securit…CVE-2009-2718Sun · 1.7% likely

    CWE-264

  12. Race condition in the java.lang package in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, related to a "3Y Race condition in reflection checks."CVE-2009-2724Sun · 1.6% likely

    CWE-362

  13. The Abstract Window Toolkit (AWT) implementation in Sun Java SE 6 before Update 15 on Windows 2000 Professional does not provide a Security Warning Icon, which makes it easier for…CVE-2009-2717Sun · 1.3% likely

    CWE-264

  14. The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "…CVE-2009-2716Sun · 1.3% likely

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.