CVE-2004-2627

High severity, CVSS 10.0. EPSS: 6.3% chance of exploitation in the next 30 days.

Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.

Published 2004-12-31. Last modified 2026-06-16.