CVE-2013-2465: Oracle Java SE Unspecified Vulnerability
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU.
Published Jun 18, 2013 · Updated Jun 16, 2026
Required action
Apply updates per vendor instructions.
Advisory details
From the National Vulnerability Database. This product uses the NVD API but is not endorsed or certified by the NVD.
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
References
- https://access.redhat.com/errata/RHSA-2014:0414
- https://bugzilla.redhat.com/show_bug.cgi?id=975118
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17106
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19074
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19455
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19703
- https://www.vicarius.io/vsociety/posts/cve-2013-2465-detect-java-vulnerability
- https://www.vicarius.io/vsociety/posts/cve-2013-2465-mitigate-java-vulnerability
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2013-2465
How this page is made: the data panel comes from the GitHub Advisory Database, CISA’s KEV catalog, the NVD and FIRST EPSS, and updates twice a day. No analysis has been written for this entry yet. Methodology
More Oracle vulnerabilities
All Oracle entriesCVE-2026-101516
Oracle Java SE Libraries vulnerability (CVE-2026-101516)
medium6.5Oct 20, 2026CVE-2026-101737
Oracle Java SE Compiler vulnerability (CVE-2026-101737)
medium5.9Oct 20, 2026CVE-2026-43660
Oracle Java SE JavaFX (WebKitGTK) vulnerability (CVE-2026-43660)
high7.5Oct 20, 2026CVE-2026-46470
Oracle Java SE JavaFX (gstreamer) vulnerability (CVE-2026-46470)
medium4.2Oct 20, 2026CVE-2026-6732
Oracle Java SE JavaFX (WebKitGTK) vulnerability (CVE-2026-6732)
medium5.9Oct 20, 2026CVE-2026-83374
Oracle Java SE Security vulnerability (CVE-2026-83374)
medium5.9Oct 20, 2026