Apple Mac OS Runtime For Java vulnerabilities

3 CVEs affecting Apple Mac OS Runtime For Java, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2001-1480, published 2001-12-31.

More from Apple.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2000-0563, published 2000-10-20. High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days. The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and earlier and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP…
• CVE-2001-1480, published 2001-12-31. High severity, CVSS 7.5. EPSS: 2.1% chance of exploitation in the next 30 days. Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
• CVE-2001-0068, published 2001-02-12. Low severity, CVSS 2.6. EPSS: 1.5% chance of exploitation in the next 30 days. Mac OS Runtime for Java (MRJ) 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter.