CVE-2008-1186: Sun JDK

High severity, CVSS 9.3. EPSS: 5.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue."

Affected products

• Sun JDK: version 1.5.0 only
• Sun JRE: version 1.4.2 only; version 1.4.2_1 only; version 1.4.2_2 only; version 1.4.2_3 only; version 1.4.2_4 only; version 1.4.2_5 only; …
• Sun SDK: version 1.4.2 only; version 1.4.2_1 only; version 1.4.2_2 only; version 1.4.2_3 only; version 1.4.2_4 only; version 1.4.2_5 only; …

Published 2008-03-06. Last modified 2026-06-16.