Live › vulnerability › CVE-2010-0840
Go to dashboardAn unspecified flaw in the Java Runtime Environment (Java SE) lets remote attackers affect confidentiality, integrity and availability through unknown vectors. CISA lists it as actively exploited in the wild.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Oracle Java Runtime Environment (JRE) | vendor | – | – |
Run java -version on each host and compare the build to the vendor's patched release; the sources do not give a fixed version.
Update the Java Runtime Environment to a current supported Oracle Java SE release per vendor instructions.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."
This page as .md · .json · in your agent: get_signal("CVE-2010-0840")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.