CVE-2012-5076VulnerabilityPublished 03/28/2022Updated 10/24/2026

CVE-2012-5076: Oracle Java SE Sandbox Bypass Vulnerability

Affects Oracle Java SESource CISA KEV

Severity

High

No CVSS score published yet

Exploitation: Actively exploited – in CISA KEV since 03/28/2022
KEV deadline: 04/18/2022
EPSS: 91.3% chance of exploitation in 30 days – higher than 99% of CVEs

What to do

CISA required action

Apply updates per vendor instructions.

nvd.nist.gov/vuln/detail/CVE-2012-5076 (opens in a new tab)

Description

CVE-2012-5076 is a vulnerability in Oracle Java SE where the default security configuration did not restrict access to certain internal packages. This flaw allows an untrusted Java application or applet to bypass Java sandbox restrictions, potentially leading to unauthorized actions. The vulnerability has been exploited in the wild and is considered high severity.

Summary

The vulnerability arises because the default Java security properties did not restrict access to the com.sun.org.glassfish.external and com.sun.org.glassfish.gmbal packages. An untrusted Java application or applet could leverage this to bypass the Java sandbox, which is designed to limit the capabilities of untrusted code. This sandbox bypass could allow malicious code to perform actions outside the intended security boundaries.

Impact

Successful exploitation allows untrusted Java code to bypass sandbox restrictions, potentially enabling unauthorized access to system resources or execution of privileged operations. This undermines the security model of Java applets and applications, increasing the risk of compromise.

Mitigation

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is confirmed, users should consider restricting or disabling Java applets from untrusted sources and apply any recommended security configurations from Oracle.

What to do

Description

AnalysisAI-generated, updated 10/24/2026, 11:11:25 UTC

References

Related threats