CVE-2011-3544: Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability

Critical severity, CVSS 9.8. Actively exploited: in CISA KEV since 2022-03-03. EPSS: 96.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 10.10 only; version 11.04 only; version 11.10 only
• Oracle JDK: before 1.6.0 (fixed in 1.6.0); version 1.6.0 only; version 1.7.0 only
• Oracle JRE: before 1.6.0 (fixed in 1.6.0); version 1.6.0 only; version 1.7.0 only
• Red Hat Satellite With Embedded Oracle: version 5.4 only
• Suse Linux Enterprise Java: version 10 only
• Suse Linux Enterprise Server: version 10 only

Published 2011-10-19. Last modified 2026-06-16.