Product of Oracle

Java SE

As of , 7 Oracle Java SE vulnerabilities are on CISA's list of exploited vulnerabilities, 4 of them used in ransomware campaigns; 0 were added in 2026. Patch first: CVE-2012-5076.

Patch first

Patch first
#VulnerabilityProductOur groupListedDeadlineEPSS
1CVE-2012-5076Sandbox BypassOracle Java SEPatch this weekMetasploit module; EPSS 0.91; verified Exploit-DB entry0.91
2CVE-2013-2465UnspecifiedOracle Java SEPatch this weekRansomware use; Metasploit module; EPSS 0.99; verified Exploit-DB entry0.99
3CVE-2012-0507Runtime Environment (JRE) Arbitrary Code ExecutionOracle Java SEPatch this weekRansomware use; Metasploit module; EPSS 0.98; verified Exploit-DB entry0.98
4CVE-2012-1723Runtime Environment (JRE) Arbitrary Code ExecutionOracle Java SEPatch this weekRansomware use; Metasploit module; EPSS 0.94; verified Exploit-DB entry0.94
5CVE-2012-4681Runtime Environment (JRE) Arbitrary Code ExecutionOracle Java SEPatch this weekRansomware use; Metasploit module; EPSS 0.99; verified Exploit-DB entry0.99
6CVE-2015-2590and Java SE Embedded Remote Code ExecutionOracle Java SEPatch soon0.25
7CVE-2015-4902Integrity CheckOracle Java SEPatch soon0.14

Added each year

24682022: 7720222023: nonenone20232024: nonenone20242025: nonenone20252026: nonenone2026
Entries CISA added each year, removed ones included. Source: CISA KEV.
Show the numbers
Periodentries added
20227
2023none
2024none
2025none
2026none

Used in ransomware

Changes CISA made to these entries

  1. CVE-2012-4681 Oracle Java SERansomware use: Unknown to Known.

Every change we recorded