Apple Java 1.5 vulnerabilities

2 CVEs affecting Apple Java 1.5, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-0539, published 2010-05-21.

More from Apple.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-0539, published 2010-05-21. Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days. Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 allows remote attackers to execute arbitrary…
• CVE-2009-2205, published 2009-09-09. Medium severity, CVSS 6.8. EPSS: 2.3% chance of exploitation in the next 30 days. Stack-based buffer overflow in the Java Web Start command launcher in Java for Mac OS X 10.5 before Update 5 allows attackers to execute arbitrary code or cause a denial of service (application…