CISA-confirmed known exploited vulnerability

CVE-2012-1723

Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Oracle · Java SE

Vulnerability details

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.

Added to CISA KEV: 2022-03-03

Ransomware campaign use: Known

CISA due date: 2022-03-24

Defensive guidance from CISA

Apply updates per vendor instructions.

This is the source's required-action field, not an independently validated patch procedure. Refer to the vendor for exact affected versions and fixes.

Source catalog date: 2026-11-06T19:44:45.1797Z · Last retrieved: 2026-11-06 21:02:26 UTC

View CISA KEV catalog View NVD record

← All vulnerabilities