CVE-2012-5076: Oracle Java SE Sandbox Bypass Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.
Published Oct 16, 2012 · Updated Jun 16, 2026
Required action
Apply updates per vendor instructions.
Advisory details
From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.
References
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Oracle vulnerabilities
All Oracle entriesCVE-2026-101516
Oracle Java SE Libraries vulnerability (CVE-2026-101516)
medium6.5Oct 20, 2026CVE-2026-101737
Oracle Java SE Compiler vulnerability (CVE-2026-101737)
medium5.9Oct 20, 2026CVE-2026-43660
Oracle Java SE JavaFX (WebKitGTK) vulnerability (CVE-2026-43660)
high7.5Oct 20, 2026CVE-2026-46470
Oracle Java SE JavaFX (gstreamer) vulnerability (CVE-2026-46470)
medium4.2Oct 20, 2026CVE-2026-6732
Oracle Java SE JavaFX (WebKitGTK) vulnerability (CVE-2026-6732)
medium5.9Oct 20, 2026CVE-2026-83374
Oracle Java SE Security vulnerability (CVE-2026-83374)
medium5.9Oct 20, 2026