CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2015-07-16
Oracle Java SE Remote Code Execution and Sandbox Escape Vulnerability (CVE-2015-2590) Technical Analysis & Hardening Guide
[Affected Scope] Oracle Java SE 6u95, 7u80, 8u45, and Java SE Embedded 7u75, 8u33 and prior
[Impact] Remote attackers can completely bypass the Java security sandbox and execute arbitrary code with the privileges of the running process
[Mitigation] Apply the latest Oracle Java SE security updates, disable Java browser plugins, and restrict untrusted Java applet execution