[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-SWRpxfTygv63orXJJN534-6Pn9oXeVxTv9ceXtsP6g":3,"g5a-ex:sun\u002Fjava_se@*":91,"g5a-family:sun\u002Fjava_se":93},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":68,"seoMetadata":69,"meta":88},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"sun","java_se",1,21,0,"2009-11-05",[14],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},"6",false,"Java Se by Sun is a technology product with 1 tracked version and 21 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},[21,28,32,36,40,44,47,51,58,64],{"cveId":22,"description":23,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":27},"CVE-2009-3867","Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.",9.3,"v2","Critical",0.73193,{"cveId":29,"description":30,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":31},"CVE-2009-3869","Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.",0.65353,{"cveId":33,"description":34,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":35},"CVE-2009-3874","Integer overflow in the JPEGImageReader implementation in the ImageI\u002FO component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample dimensions in a JPEG file that triggers a heap-based buffer overflow, aka Bug Id 6874643.",0.09498,{"cveId":37,"description":38,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":39},"CVE-2009-3871","Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.",0.06817,{"cveId":41,"description":42,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":43},"CVE-2009-3868","Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970.",0.04246,{"cveId":45,"description":46,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":43},"CVE-2009-3872","Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862969.",{"cveId":48,"description":49,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":50},"CVE-2009-3873","The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a \"quantization problem,\" aka Bug Id 6862968.",0.04195,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":25,"severity":56,"isKev":16,"epssScore":57},"CVE-2009-2676","Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.2_21 and earlier; allows remote attackers to create or modify arbitrary files via vectors involving an untrusted Java applet that accesses an old version of JNLPAppletLauncher.","2009-08-05",6.8,"Medium",0.03645,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":62,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":63},"CVE-2009-2476","The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent attackers to bypass intended access restrictions by leveraging finalizer resurrection to obtain a reference to a privileged object.","2009-08-10",10,0.02877,{"cveId":65,"description":66,"publishedDate":61,"cvssScore":62,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":67},"CVE-2009-2689","JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows context-dependent attackers to bypass intended access restrictions via an untrusted (1) applet or (2) application.",0.02839,[],{"title":70,"metaDescription":71,"keywords":72,"structuredData":73},"Java Se by Sun - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Java Se by Sun covering 1 version with 21 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Java Se vulnerabilities, Java Se security, Java Se CVE, Sun Java Se, Java Se threat intelligence, Sun security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":74,"@type":75,"name":76,"description":71,"url":77,"manufacturer":78,"applicationCategory":82,"softwareVersion":83,"mainEntity":84},"https:\u002F\u002Fschema.org","SoftwareApplication","Java Se","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsun\u002Fjava_se",{"@type":79,"name":80,"url":81},"Organization","Sun","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsun","Security Software","1 versions tracked",{"@type":85,"name":86,"description":87,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Java Se Security Vulnerabilities","Security vulnerabilities affecting Java Se by Sun",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":89,"apiVersion":90},"2026-10-16T23:16:31.656Z","3.0",{"rows":92,"total":11,"capped":16,"failed":11},[],[94],{"product":95,"cves":9},"java_se_development_kit"]