High 10.0Published Jan 20, 2016

CVE-2016-0494Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity…

Updated under an hour ago (Oct 26, 2026, 3:10 PM ET)

Does this affect you?

It affects canonical ubuntu_linux and 2 other products. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for canonical ubuntu_linux

Exploited in the last 30 days

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS: 10.0 HIGH (v2.0, NVD)AV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: oracle
NVD analysis: Modified
Record last updated: Oct 15, 2026
First seen by InfoSec Signals: Oct 15, 2026

Affected products

Affected products

canonical ubuntu_linux canonical:ubuntu_linux	12.04; 14.04; 15.04; 15.10	NVD
oracle jdk oracle:jdk	1.6.0; 1.7.0; 1.8.0	NVD
oracle jre oracle:jre	1.6.0; 1.7.0; 1.8.0	NVD

References

References

http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00047.html	vendor-advisory, x-refsource-suse
http://www.securitytracker.com/id/1034715	vdb-entry, x-refsource-sectrack
http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00048.html	vendor-advisory, x-refsource-suse
https://security.gentoo.org/glsa/201610-08	vendor-advisory, x-refsource-gentoo
http://www.ubuntu.com/usn/USN-2884-1	vendor-advisory, x-refsource-ubuntu
http://www.debian.org/security/2016/dsa-3465	vendor-advisory, x-refsource-debian
http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html	x-refsource-confirm
http://www.ubuntu.com/usn/USN-2885-1	vendor-advisory, x-refsource-ubuntu
http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html	x-refsource-confirm, vendor-advisory
https://access.redhat.com/errata/RHSA-2016:1430	vendor-advisory, x-refsource-redhat
1–10 of 26

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.