CVE-2014-6585: Oracle JDK

Low severity, CVSS 2.6. EPSS: 4.3% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality via unknown vectors related to 2D, a different vulnerability than CVE-2014-6591.

Affected products

• Oracle JDK: version 1.5.0 only; version 1.6.0 only; version 1.7.0 only; version 1.8.0 only
• Oracle JRE: version 1.5.0 only; version 1.6.0 only; version 1.7.0 only; version 1.8.0 only

Published 2015-01-21. Last modified 2026-06-17.