CVE-2009-2716: Sun Java SE

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "old zip and certificate handling" and have unspecified other impact via unknown vectors.

Affected products

• Sun Java SE: up to and including 6

Published 2009-08-10. Last modified 2026-06-16.