Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:*:update_16:*:*:*:*:*:*

part: a version: * update: update_16

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3886 vulnerable 2026-06-08 04:51:44.926311 Details available
The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet, which has unspecified impact and attack vectors, related to a "regression," aka Bug Id 6870531.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:51.022Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3885 vulnerable 2026-06-08 04:51:44.910548 Details available
Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname for an International Color Consortium (ICC) profile file, probably a related issue to CVE-2007-2789, aka Bug Id 6632445.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:51.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3884 vulnerable 2026-06-08 04:51:44.909489 Details available
The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via vectors related to handling of zoneinfo (aka tz) files, aka Bug Id 6824265.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:50.924Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3881 vulnerable 2026-06-08 04:51:44.885225 Details available
Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gain privileges via unspecified vectors, related to an "information leak vulnerability," aka Bug Id 6636650.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:50.425Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3880 vulnerable 2026-06-08 04:51:44.884060 Details available
The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects that may be sent to loggers, which allows attackers to obtain sensitive information via vectors related to the implementation of Component, KeyboardFocusManager, and DefaultKeyboardFocusManager, aka Bug Id 6664512.
Published: 2009-11-09T19:00:00.000Z
Updated: 2024-08-07T06:45:50.096Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3879 vulnerable 2026-06-08 04:51:44.882885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3729 vulnerable 2026-06-08 04:51:44.038504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5356 vulnerable 2026-06-08 04:50:51.074664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5355 vulnerable 2026-06-08 04:50:51.070304 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5354 vulnerable 2026-06-08 04:50:51.066791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5353 vulnerable 2026-06-08 04:50:51.063323 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5352 vulnerable 2026-06-08 04:50:51.060297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5351 vulnerable 2026-06-08 04:50:51.057706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5350 vulnerable 2026-06-08 04:50:51.054794 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5349 vulnerable 2026-06-08 04:50:51.052914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5348 vulnerable 2026-06-08 04:50:51.050517 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5344 vulnerable 2026-06-08 04:50:50.916685 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5343 vulnerable 2026-06-08 04:50:50.913877 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5342 vulnerable 2026-06-08 04:50:50.911256 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5341 vulnerable 2026-06-08 04:50:50.908601 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5340 vulnerable 2026-06-08 04:50:50.905933 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-5339 vulnerable 2026-06-08 04:50:50.873012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2086 vulnerable 2026-06-08 04:50:22.886169 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.