OpenJDK 6 vulnerabilities
3 known CVE vulnerabilities in OpenJDK 6, translated and rated.
- CVE-2014-2405High
Unspecified vulnerability in OpenJDK 6 before version 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS. This vulnerability has unknown impact and attack vectors, differing from CVE-2014-0462.
- CVE-2014-0462High
Unspecified vulnerability in OpenJDK 6 before version 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS may have unknown impact and attack vectors.
- CVE-2026-10037High
A sandbox escape vulnerability exists in the OpenJDK packages provided in Ubuntu. The .jar MIME handlers installed by these packages execute files marked as executable when the mailcap package is installed. A compromised or malicious sandboxed application with access to the OpenURI portal via xdg-desktop-portal-gtk can write a malicious .jar file to the host file system, set its executable bit, and trigger the handler to execute arbitrary code outside of the sandbox environment.