CVE-2010-0840VulnerabilityPublished 05/25/2022Updated 10/24/2026

CVE-2010-0840: Oracle JRE Unspecified Vulnerability

Affects Oracle Java Runtime Environment (JRE)Source CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 05/25/2022
KEV deadline: 06/15/2022
EPSS: 96.3% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2010-0840 (opens in a new tab)

Description

CVE-2010-0840 is an unspecified vulnerability in Oracle's Java Runtime Environment (JRE) that allows remote attackers to impact confidentiality, integrity, and availability. The exact attack vectors and technical details are not disclosed. It has been exploited in the wild, indicating active threat usage. No specific affected versions or patch information is provided.

Summary

This vulnerability in the Java Runtime Environment (JRE) within the Java SE component is unspecified in nature but enables remote attackers to compromise confidentiality, integrity, and availability through unknown methods. The lack of detailed technical information limits precise understanding of the flaw. It is confirmed to have been exploited in the wild, highlighting its practical risk. No vendor advisory or patch details are available to clarify remediation status or affected versions.

Impact

The vulnerability can be exploited remotely to affect the confidentiality, integrity, and availability of systems running the vulnerable JRE. Given it is exploited in the wild, it poses a significant risk to affected environments. However, without specific technical details or affected version data, the exact scope and severity of impact cannot be fully determined.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Due to the unspecified nature and lack of vendor advisory, users should monitor Oracle's official channels for updates and apply any forthcoming patches promptly.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:42:54 UTC

References

Related threats