Class familyOracle · Java SE
Oracle Java SE access control flaws, 2012–2026
5 Java SE CVEs with CWE-284 weaknesses, 16 Jun 2012 to 20 Oct 2026. 4 are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it..
CVEs by year
Published each year. Select a CVE to open it.Grouped by product and weakness type (CWE); not proven to share a root cause.
3 2012’12
2013’13
2014’14
1 2015’15
2016’16
2017’17
2018’18
2019’19
2020’20
2021’21
2022’22
2023’23
2024’24
2025’25
1 2026’26
In CISA KEVNot in KEV
20123 CVEs, 3 in KEV
20151 CVE, 1 in KEV
20261 CVE
CVEs in this family
Table view of the years above| CVE | Published | Title | Linked from | Priority |
|---|---|---|---|---|
| CVE-2012-1723KEV | 16 Jun 2012 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Grouped by weakness | 73.8 |
| CVE-2012-4681KEV | 28 Aug 2012 | Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability | Grouped by weakness | 68.7 |
| CVE-2012-5076KEV | 16 Oct 2012 | Oracle Java SE Sandbox Bypass Vulnerability | Grouped by weakness | 64.8 |
| CVE-2015-4902KEV | 22 Oct 2015 | Oracle Java SE Integrity Check Vulnerability | Grouped by weakness | 64.9 |
| CVE-2026-83378 | 20 Oct 2026 | Vulnerability in Oracle Java SE (component: Compiler) | Grouped by weakness | 5.7 |