{"id":"CVE-2010-0840","published":"2010-04-01T16:30:00Z","modified":"2026-06-16T23:16:57Z","title":"Oracle JRE Unspecified Vulnerability","vendor":"Oracle","product":"Java Runtime Environment (JRE)","tier":"core","eol":null,"description":{"text":"Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.  NOTE: the previous information was obtained from the March 2010 CPU.  Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) \"a similar trust issue with interfaces,\" aka \"Trusted Methods Chaining Remote Code Execution Vulnerability.\"","provenance":"source","from":"NVD"},"summary":{"text":"The flaw is an unspecified vulnerability in the Java Runtime Environment component of Oracle Java SE and Java for Business, where improper checks when executing privileged methods are reported by a researcher to permit arbitrary code execution through untrusted objects that extend trusted classes or through similar trust issues with interfaces. A remote attacker with no authentication or user interaction required, reaching the affected Java runtime over the network, can affect confidentiality, integrity, and availability via these unknown vectors.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T08:31:04Z"},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.96319,"percentile":0.99879,"date":"2026-10-28","provenance":"source"},"kev":{"dateAdded":"2022-05-25","dueDate":"2022-06-15","ransomware":false,"requiredAction":"Apply updates per vendor instructions.","notes":"https://nvd.nist.gov/vuln/detail/CVE-2010-0840","provenance":"source"},"vulncheckKev":{"dateAdded":"2011-07-26","exploitedFirstSeen":"2011-07-26","ransomware":true,"evidence":[{"url":"https://www.hkcert.org/blog/large-scale-injection-incidents-targeting-oscommerce-websites","date":"2011-07-26"},{"url":"https://cybersecurityworks.com/pdf/ransomware/Spotlight_Ransomware2021.pdf","date":"2021-02-11"},{"url":"https://dl.acm.org/doi/pdf/10.1145/3465481.3465758","date":"2021-08-17"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2022-05-25"}],"evidenceTotal":4,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"},{"name":"Actively_Exploited_Kev | Oct 18, 2026","url":"https://otx.alienvault.com/pulse/6ad38c22e1848f8189d1c121","created":"2026-10-17"}],"provenance":"machine"},"cwes":[],"references":[{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00001.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00002.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557596201693&w=2","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/39292","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/39317","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/39659","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/39819","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/40211","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/40545","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/43308","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4170","tags":["Release Notes","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4171","tags":["Release Notes","Third Party Advisory"]},{"url":"http://ubuntu.com/usn/usn-923-1","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0337.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0338.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0339.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0383.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0471.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0489.html","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/510528/100/0/threaded","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/39065","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","tags":["Release Notes"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1191","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1454","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1523","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1793","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-056","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13971","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9974","tags":["Broken Link"]},{"url":"http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751","tags":["Broken Link"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00001.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.apple.com/archives/security-announce/2010//May/msg00002.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html","tags":["Mailing List","Third Party Advisory"]},{"url":"http://marc.info/?l=bugtraq&m=127557596201693&w=2","tags":["Mailing List"]},{"url":"http://marc.info/?l=bugtraq&m=134254866602253&w=2","tags":["Mailing List"]},{"url":"http://secunia.com/advisories/39292","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/39317","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/39659","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/39819","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/40211","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/40545","tags":["Broken Link","Vendor Advisory"]},{"url":"http://secunia.com/advisories/43308","tags":["Broken Link","Vendor Advisory"]},{"url":"http://support.apple.com/kb/HT4170","tags":["Release Notes","Third Party Advisory"]},{"url":"http://support.apple.com/kb/HT4171","tags":["Release Notes","Third Party Advisory"]},{"url":"http://ubuntu.com/usn/usn-923-1","tags":["Third Party Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2010:084","tags":["Broken Link"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html","tags":["Patch","Third Party Advisory"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0337.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0338.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0339.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0383.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0471.html","tags":["Broken Link"]},{"url":"http://www.redhat.com/support/errata/RHSA-2010-0489.html","tags":["Broken Link"]},{"url":"http://www.securityfocus.com/archive/1/510528/100/0/threaded","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/archive/1/516397/100/0/threaded","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/39065","tags":["Broken Link","Third Party Advisory","VDB Entry"]},{"url":"http://www.vmware.com/security/advisories/VMSA-2011-0003.html","tags":["Third Party Advisory"]},{"url":"http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html","tags":["Release Notes"]},{"url":"http://www.vupen.com/english/advisories/2010/1107","tags":["Broken Link"]},{"url":"http://www.vupen.com/english/advisories/2010/1191","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1454","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1523","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2010/1793","tags":["Broken Link","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-10-056","tags":["Third Party Advisory","VDB Entry"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13971","tags":["Broken Link"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9974","tags":["Broken Link"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-0840","tags":["US Government Resource"]}],"techniques":[{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 1)","mappingType":"uncategorized","evidence":[],"confidence":"low","confidenceNote":"server-side bug exploitable without user interaction; client-execution technique does not fit"},{"id":"T1204.002","name":"Malicious File","tactics":["execution"],"provenance":"source","basis":"ctid-cve","bases":["ctid-cve"],"basisDetail":"CTID attack_to_cve (Phase 1)","mappingType":"uncategorized","evidence":[],"confidence":"low","confidenceNote":"server-side bug exploitable without user interaction; client-execution technique does not fit"},{"id":"T1190","name":"Exploit Public-Facing Application","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: remote unauthenticated attack against exposed Java runtime","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors","start":149,"end":247}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1059","name":"Command and Scripting Interpreter","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: arbitrary code execution via trust-chaining bypass","mappingType":"primary_impact","evidence":[{"from":"description","quote":"allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class","start":501,"end":602}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-93c55e10ab45afc37c85","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/E/B/0/EB0F50CC-989C-4B66-B7F6-68CD3DC90DE3/Microsoft_Security_Intelligence_Report_Volume_21_English.pdf","date":null,"mentions":[{"quote":"CVE-2010-0840","start":102313,"end":102326},{"quote":" CVE-2010-0840 is a JRE vulnerability that was first disclosed in March 2010","start":104887,"end":104964},{"quote":"CVE-2010-0840, 57","start":261132,"end":261149}]},{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"CVE-2010-0840","start":82554,"end":82567},{"quote":" CVE-2010-0840 is a JRE vulnerability that was first","start":85802,"end":85855},{"quote":"CVE-2010-0840, 47, 49","start":237965,"end":237986}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2010-0865","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0865","exploited":true,"exploitedSince":"2022-05-25","provenance":"source"},"exploits":[{"id":16297,"url":"https://www.exploit-db.com/exploits/16297","title":"Java - 'Statement.invoke()' Trusted Method Chain (Metasploit)","type":"remote","platform":"multiple","date":"2010-12-15","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":1,"earliest":"2010-12-15"},"metasploit":[{"name":"Java Statement.invoke() Trusted Method Chain Privilege Escalation","module":"exploit/multi/browser/java_trusted_chain","type":"exploit","disclosureDate":"2010-03-31","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_trusted_chain.rb"}],"first":{"date":"2010-03-31","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_trusted_chain.rb"},"provenance":"source"},"exploitRefs":[],"flow":[{"stage":"exploitation","techniques":["T1190"],"provenance":"ai"},{"stage":"primary","techniques":["T1059"],"provenance":"ai"},{"stage":"related","techniques":["T1203","T1204.002"],"provenance":"source","lowConfidence":true}],"timeline":[{"date":"2010-03-31","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2010-12-15","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_trusted_chain.rb","provenance":"source"},{"date":"2010-04-01","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2010-0840","provenance":"source"},{"date":"2011-07-26","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.hkcert.org/blog/large-scale-injection-incidents-targeting-oscommerce-websites","provenance":"source"},{"date":"2022-05-25","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2022-05-25","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-0865","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":"Metasploit","daysToKev":4437},"priority":{"score":86.0,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 5574 days ago"},{"name":"Known ransomware use","points":10.0,"detail":"CISA KEV and VulnCheck KEV: Known"},{"name":"EPSS percentile","points":19.98,"detail":"percentile 0.9988"},{"name":"Named in threat reports","points":6.13,"detail":"2 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 Exploit-DB entry; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.86,"detail":"base score 9.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}