Security services, software licences and managed support from one accountable partner.

← All vulnerabilities

Not yet scored Actively exploited Used in ransomware

CVE-2012-0507

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Description

An incorrect type vulnerability exists in the Concurrency component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.

Recommended action

Apply updates per vendor instructions.

CISA remediation due date for U.S. federal agencies: 24 Mar 2022.

Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.