CVE-2026-10037
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.
Risk Assessment
The risk is that an attacker can execute arbitrary code outside the sandbox environment, potentially leading to full system compromise or data theft.
Recommendation
It is recommended to immediately update the OpenJDK packages to a patched version and remove the mailcap package if not required.
Other vulnerabilities in OpenJDK
See all- CVE-2014-2405High
Unspecified vulnerability in OpenJDK 6 before version 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS. This vulnerability has unknown impact and attack vectors, differing from CVE-2014-0462.
- CVE-2014-0462High
Unspecified vulnerability in OpenJDK 6 before version 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS may have unknown impact and attack vectors.
Original NVD description (English source)
A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.