---
id: "CVE-2012-1723"
kind: "vulnerability"
aliases: ["CVE-2012-1723"]
title: "Oracle Java SE: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability"
severity: "critical"
cvss: 10.0
epss: 0.93566
exploited: true
status: "open"
category: "runtime"
products: [{"name": "Oracle Java SE", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["desktop", "exploited", "java", "jre", "oracle-java-se", "ransomware", "runtime", "servers"]
not_affected_if: ["not-using-oracle-java"]
published_at: "2012-06-16T21:55:03+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-23T21:57:35+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1723", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2012-1723", "first_seen_at": "2026-10-23T19:13:44+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2012-1723", "first_seen_at": "2026-10-23T21:57:35+00:00"}]
---

# Oracle Java SE: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle Java SE Runtime Environment (JRE) has an unspecified flaw in its Hotspot component that lets remote attackers affect confidentiality, integrity and availability. This is on CISA's known-exploited list and has a very high EPSS score, so exploitation in the wild is likely.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Oracle Java SE affected ? fixed ?

## How to check

Run 'java -version' on each host and compare against the Oracle Java SE release that fixes CVE-2012-1723; unknown which exact versions are affected in the sources.

## Fix

Update Oracle Java SE JRE to a release that includes the Oracle security patch for CVE-2012-1723, per vendor instructions (CISA required action: apply updates).

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2012-1723
- 2026-10-23T19:13:44+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2012-1723
- 2026-10-23T21:57:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2012-1723

## From the sources

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_