Every CVE Search/ Get API key

CVE-2019-2766

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...

3.1 LowFix available

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

2.71%Up 1.4 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 3.1

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
CVE-2019-2766
CVSS 3.1
3.1 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:P/I:N/A:N
Updated
2026-11-02
CVE List No score

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
CVE-2019-2766
Updated
2026-11-02
EUVDEUVD-2019-12405 No score

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
EUVD-2019-12405
Updated
2026-11-03
GitHub AdvisoriesGHSA-98rm-47wr-6469 3.1

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
GHSA-98rm-47wr-6469
CVSS 3.0
3.1 LowCVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Updated
2026-11-02
OSVALPINE-CVE-2019-2766 3.1

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets (in Java SE 8), that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.0 Base Score 3.1 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N).

Record
ALPINE-CVE-2019-2766
CVSS 3.1
3.1 LowCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Updated
2026-11-03
OSVopenSUSE-SU-2019:1912-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2842: Extended AES support (bsc#1141786).
  • CVE-2019-7317: Improve PNG support (bsc#1141780).
  • Certificate validation improvements

Non-security issue fixed:

  • Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1912-1
Updated
2026-11-02
Show 14 moreShow less
OSVopenSUSE-SU-2019:1916-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-7317: Improve PNG support options (bsc#1141780).
  • CVE-2019-2818: Better Poly1305 support (bsc#1141788).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2821: Improve TLS negotiation (bsc#1141781).
  • Certificate validation improvements

Non-security issues fixed:

  • Do not fail installation when the manpages are not present (bsc#1115375)
  • Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer (bsc#1140461)

This update was imported from the SUSE:SLE-15:Update update project.

Record
openSUSE-SU-2019:1916-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10871-1 No score

java-11-openjdk-11.0.12.0-3.1 on GA media

These are all security issues fixed in the java-11-openjdk-11.0.12.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10871-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10872-1 No score

java-13-openjdk-13.0.8.0-3.1 on GA media

These are all security issues fixed in the java-13-openjdk-13.0.8.0-3.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10872-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10876-1 No score

java-1_8_0-openjdk-1.8.0.302-2.2 on GA media

These are all security issues fixed in the java-1_8_0-openjdk-1.8.0.302-2.2 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10876-1
Updated
2026-11-02
OSVSUSE-SU-2019:14160-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

Update to Java 7.1 Service Refresh 4 Fix Pack 50.

Security issues fixed:

  • CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
  • CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
  • CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
  • CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
  • CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
Record
SUSE-SU-2019:14160-1
Updated
2026-11-02
OSVSUSE-SU-2019:14188-1 No score

Security update for java-1_7_0-ibm

This update for java-1_7_0-ibm fixes the following issues:

Update to Java 7.0 Service Refresh 10 Fix Pack 50 (bsc#1147021).

Security issues fixed:

  • CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
  • CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
  • CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
  • CVE-2019-2816: Fixed issue inside Component Networking (bsc#1147021).
  • CVE-2019-4473: Fixed insecure RPATH in multiple binaries on AIX (bsc#1147021).
  • CVE-2019-7317: Fixed use-after-free in libpng, affecting client-libs/java.awt (bsc#1147021).
  • CVE-2019-11771: Fixed insecure RPATH in OpenJ9 on AIX (bsc#1147021).
  • CVE-2019-11775: Fixed failure to privatize a value pulled out of the loop by versioning (bsc#1147021).
Record
SUSE-SU-2019:14188-1
Updated
2026-11-02
OSVSUSE-SU-2019:2002-1 No score

Security update for java-11-openjdk

This update for java-11-openjdk to version jdk-11.0.4+11 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-7317: Improve PNG support options (bsc#1141780).
  • CVE-2019-2818: Better Poly1305 support (bsc#1141788).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2821: Improve TLS negotiation (bsc#1141781).
  • Certificate validation improvements

Non-security issues fixed:

  • Do not fail installation when the manpages are not present (bsc#1115375)
  • Backport upstream fix for JDK-8208602: Cannot read PEM X.509 cert if there is whitespace after the header or footer (bsc#1140461)
Record
SUSE-SU-2019:2002-1
Updated
2026-11-02
OSVSUSE-SU-2019:2021-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2842: Extended AES support (bsc#1141786).
  • CVE-2019-7317: Improve PNG support (bsc#1141780).
  • Certificate validation improvements

Non-security issue fixed:

  • Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)
Record
SUSE-SU-2019:2021-1
Updated
2026-11-02
OSVSUSE-SU-2019:2028-1 No score

Security update for java-1_7_0-openjdk

This update for java-1_7_0-openjdk to version 7u231 fixes the following issues:

Security issues fixed:

  • CVE_2019-2426: Improve web server connections (bsc#1134297).
  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2842: Extended AES support (bsc#1141786).
  • CVE-2019-7317: Improve PNG support (bsc#1141780).
  • CVE-2018-3639: fix revision to prefer PR_SPEC_DISABLE_NOEXEC to PR_SPEC_DISABLE (bsc#1087082).
  • Certificate validation improvements
Record
SUSE-SU-2019:2028-1
Updated
2026-11-02
OSVSUSE-SU-2019:2036-1 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2842: Extended AES support (bsc#1141786).
  • CVE-2019-7317: Improve PNG support (bsc#1141780).
  • Certificate validation improvements

Non-security issue fixed:

  • Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)
Record
SUSE-SU-2019:2036-1
Updated
2026-11-02
OSVSUSE-SU-2019:2036-2 No score

Security update for java-1_8_0-openjdk

This update for java-1_8_0-openjdk to version 8u222 fixes the following issues:

Security issues fixed:

  • CVE-2019-2745: Improved ECC Implementation (bsc#1141784).
  • CVE-2019-2762: Exceptional throw cases (bsc#1141782).
  • CVE-2019-2766: Improve file protocol handling (bsc#1141789).
  • CVE-2019-2769: Better copies of CopiesList (bsc#1141783).
  • CVE-2019-2786: More limited privilege usage (bsc#1141787).
  • CVE-2019-2816: Normalize normalization (bsc#1141785).
  • CVE-2019-2842: Extended AES support (bsc#1141786).
  • CVE-2019-7317: Improve PNG support (bsc#1141780).
  • Certificate validation improvements

Non-security issue fixed:

  • Fixed an issue where the installation failed when the manpages are not present (bsc#1115375)
Record
SUSE-SU-2019:2036-2
Updated
2026-11-02
OSVSUSE-SU-2019:2291-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 5 Fix Pack 40.

Security issues fixed:

  • CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
  • CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
  • CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
  • CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
  • CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
  • CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).
Record
SUSE-SU-2019:2291-1
Updated
2026-11-02
OSVSUSE-SU-2019:2336-1 No score

Security update for java-1_7_1-ibm

This update for java-1_7_1-ibm fixes the following issues:

Update to Java 7.1 Service Refresh 4 Fix Pack 50.

Security issues fixed:

  • CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
  • CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
  • CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
  • CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
  • CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
Record
SUSE-SU-2019:2336-1
Updated
2026-11-02
OSVSUSE-SU-2019:2371-1 No score

Security update for java-1_8_0-ibm

This update for java-1_8_0-ibm fixes the following issues:

Update to Java 8.0 Service Refresh 5 Fix Pack 40.

Security issues fixed:

  • CVE-2019-11771: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-11772: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-11775: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-4473: IBM Security Update July 2019 (bsc#1147021)
  • CVE-2019-7317: Fixed issue inside Component AWT (libpng)(bsc#1141780).
  • CVE-2019-2769: Fixed issue inside Component Utilities (bsc#1141783).
  • CVE-2019-2762: Fixed issue inside Component Utilities (bsc#1141782).
  • CVE-2019-2816: Fixed issue inside Component Networking (bsc#1141785).
  • CVE-2019-2766: Fixed issue inside Component Networking (bsc#1141789).
  • CVE-2019-2786: Fixed issue inside Component Security (bsc#1141787).
Record
SUSE-SU-2019:2371-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openjdk11
Alpine:v3.15
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.16
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.17
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.18
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.19
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.20
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.21
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.22
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.23
 before 11.0.4_p11-r0
11.0.4_p11-r0
openjdk11
Alpine:v3.24
 before 11.0.4_p11-r0
11.0.4_p11-r0
Show 104 moreShow less
Affected packages
PackageAffectedFixed
openjdk7
Alpine:v3.10
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk7
Alpine:v3.11
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk7
Alpine:v3.12
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk7
Alpine:v3.13
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk7
Alpine:v3.14
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk7
Alpine:v3.15
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk7
Alpine:v3.16
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk7
Alpine:v3.17
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk7
Alpine:v3.18
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk7
Alpine:v3.9
 before 7.231.2.6.19-r0
7.231.2.6.19-r0
openjdk8
Alpine:v3.10
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.11
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.12
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.13
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.14
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.15
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.16
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.17
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.18
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.19
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.20
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.21
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.22
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.23
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.24
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.7
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.8
 before 8.222.10-r0
8.222.10-r0
openjdk8
Alpine:v3.9
 before 8.222.10-r0
8.222.10-r0
java-1_7_1-ibm
SUSE:Linux Enterprise Server 11 SP4-LTSS
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-26.44.1
1.7.1_sr4.50-26.44.1
java-1_7_0-ibm
SUSE:Linux Enterprise Point of Sale 11 SP3
From an advisory covering 8 CVEs
 before 1.7.0_sr10.50-65.42.1
1.7.0_sr10.50-65.42.1
java-11-openjdk
SUSE:Linux Enterprise Module for Basesystem 15
From an advisory covering 9 CVEs
 before 11.0.4.0-3.33.1
11.0.4.0-3.33.1
java-11-openjdk
SUSE:Linux Enterprise Module for Basesystem 15 SP1
From an advisory covering 9 CVEs
 before 11.0.4.0-3.33.1
11.0.4.0-3.33.1
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15
From an advisory covering 8 CVEs
 before 1.8.0.222-3.24.2
1.8.0.222-3.24.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 8 CVEs
 before 1.8.0.222-3.24.2
1.8.0.222-3.24.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Module for Package Hub 15
From an advisory covering 8 CVEs
 before 1.8.0.222-3.24.2
1.8.0.222-3.24.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 10 CVEs
 before 1.7.0.231-43.27.2
1.7.0.231-43.27.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 10 CVEs
 before 1.7.0.231-43.27.2
1.7.0.231-43.27.2
java-1_7_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 10 CVEs
 before 1.7.0.231-43.27.2
1.7.0.231-43.27.2
java-1_8_0-openjdk
SUSE:HPE Helion OpenStack 8
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:OpenStack Cloud 7
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:OpenStack Cloud 8
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Desktop 12 SP4
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Enterprise Storage 4
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-openjdk
SUSE:Enterprise Storage 5
From an advisory covering 8 CVEs
 before 1.8.0.222-27.35.2
1.8.0.222-27.35.2
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-3.24.1
1.8.0_sr5.40-3.24.1
java-1_8_0-ibm
SUSE:Linux Enterprise Module for Legacy 15 SP1
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-3.24.1
1.8.0_sr5.40-3.24.1
java-1_7_1-ibm
SUSE:HPE Helion OpenStack 8
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:OpenStack Cloud 7
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:OpenStack Cloud 8
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Enterprise Storage 4
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_7_1-ibm
SUSE:Enterprise Storage 5
From an advisory covering 8 CVEs
 before 1.7.1_sr4.50-38.41.1
1.7.1_sr4.50-38.41.1
java-1_8_0-ibm
SUSE:HPE Helion OpenStack 8
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:OpenStack Cloud 7
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:OpenStack Cloud 8
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP1
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP2
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP3
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP4
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Software Development Kit 12 SP5
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP1-LTSS
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-LTSS
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP2-BCL
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-LTSS
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP3-BCL
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP4
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP4
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server 12 SP5
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Enterprise Storage 4
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-ibm
SUSE:Enterprise Storage 5
From an advisory covering 12 CVEs
 before 1.8.0_sr5.40-30.54.1
1.8.0_sr5.40-30.54.1
java-1_8_0-openjdk
openSUSE:Leap 15.0
From an advisory covering 8 CVEs
 before 1.8.0.222-lp151.2.3.1
1.8.0.222-lp151.2.3.1
java-1_8_0-openjdk
openSUSE:Leap 15.1
From an advisory covering 8 CVEs
 before 1.8.0.222-lp151.2.3.1
1.8.0.222-lp151.2.3.1
java-11-openjdk
openSUSE:Leap 15.0
From an advisory covering 9 CVEs
 before 11.0.4.0-lp151.3.6.1
11.0.4.0-lp151.3.6.1
java-11-openjdk
openSUSE:Leap 15.1
From an advisory covering 9 CVEs
 before 11.0.4.0-lp151.3.6.1
11.0.4.0-lp151.3.6.1
java-11-openjdk
openSUSE:Tumbleweed
From an advisory covering 95 CVEs
 before 11.0.12.0-3.1
11.0.12.0-3.1
java-13-openjdk
openSUSE:Tumbleweed
From an advisory covering 95 CVEs
 before 13.0.8.0-3.1
13.0.8.0-3.1
java-1_8_0-openjdk
openSUSE:Tumbleweed
From an advisory covering 175 CVEs
 before 1.8.0.302-2.2
1.8.0.302-2.2

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2019-2766 is a low vulnerability (CVSS 3.1) in Oracle Corporation Java, published July 23, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.71%, the 86th percentile. Fixed in openjdk11 11.0.4_p11-r0.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 31 references. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open