CVE-2016-3511: oracle jdk
Vulnerability summary
CVE-2016-3511 is a high (CVSS 7.7) vulnerability in oracle jdk. EPSS estimates a 0.51% chance of exploitation in the next 30 days, higher than 43.3% of scored vulnerabilities.
Not severe (CVSS 7.7, local access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 14 · Related 11Timeline
- 21-07-2016PublishedVulnerability first disclosed.
- 11-10-2024Last modifiedVulnerability information updated.
Description
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows local users to affect confidentiality, integrity, and availability via vectors related to Deployment.
CVSS metrics
3 scores · 2 sources · 2 versions- OSV · ChainguardEcosystem advisory · calculated7.7HighCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
EPSS trend
Probability
0.51%
Chance of exploitation in the next 30 days
Percentile
43%
Versus all other CVEs
30-day change
No change 0.00 pp
From 0.51% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Known conditions: local access, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Chainguard16 products
- openjdk-11-openj9-default-policy< 0.53.0-r0
- openjdk-17-openj9-default-policy< 0.53.0-r0
- openjdk-21-openj9-default-policy< 0.53.0-r0
- openjdk-25-openj9< 0.59.0-r1
- openjdk-25-openj9-dbg< 0.59.0-r1
2 vendors · 18 products
References
21 links- lists.opensuse.org/opensuse-security-announce/2016-09/msg00005.htmlVendor AdvisoryX Refsource SUSEWEB
- www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.htmlX Refsource CONFIRMPatchVendor AdvisoryFIX
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00024.htmlVendor AdvisoryX Refsource SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00034.htmlVendor AdvisoryX Refsource SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2016-09/msg00006.htmlVendor AdvisoryX Refsource SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00033.htmlVendor AdvisoryX Refsource SUSEWEB
Show all 21 references
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00011.htmlVendor AdvisoryX Refsource SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00032.htmlVendor AdvisoryX Refsource SUSEWEB
- lists.opensuse.org/opensuse-security-announce/2016-08/msg00035.htmlVendor AdvisoryX Refsource SUSEWEB