CVE-2008-1185

no score yetEPSS 5.6%

sun: no CVSS score yet. EPSS 5.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1186, aka "the first issue."

EPSS: 5.6% chance of exploitation in the next 30 days; higher than 92% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2008-03-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

sun:jdk
sun:jre
sun:sdk

References

http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html
http://secunia.com/advisories/29239
http://secunia.com/advisories/29273
http://secunia.com/advisories/29582

Check your stack JSON