peter bassill · operator
$ cve CVE-2016-0686 JSON

CVE-2016-0686

9.6
CRITICAL · CVSS 3.0 · EPSS 4.7% (pctl 92)

In your normal cycle

Critical by CVSS (9.6), but no sign of active exploitation.

Description

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77 and Java SE Embedded 8u77 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Serialization.

Scoring

CVSS9.6 (CRITICAL, v3.0)
VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS4.72% — more likely to be exploited than 92% of all CVEs
On CISA KEVno
Public exploitnone known
Published2016-04-21
Last modified2026-06-17

Affected (2)

VendorProduct
oraclejdk
oraclejre

References

→ the Explorer  ·  watch your stack  ·  NVD