CVE-2016-0636: Oracle JDK

High severity, CVSS 8.1. EPSS: 5.8% chance of exploitation in the next 30 days.

Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to the Hotspot sub-component.

Affected products

• Oracle JDK: version 1.7.0 only; version 1.8.0 only
• Oracle JRE: version 1.7.0 only; version 1.8.0 only
• Red Hat Enterprise Linux Desktop: version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Hpc Node: version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Server: version 6.0 only; version 7.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only; version 7.0 only
• Red Hat ICEDTEA7: up to and including 2.6.6

Published 2016-03-24. Last modified 2026-06-17.