CVE-2010-0539: Apple Java 1.5
Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days.
Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted applet.
Affected products
Published 2010-05-21. Last modified 2026-06-16.