Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2017-10086

critical

CVE-2017-10086

JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX)

Published Modified
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Red Hat8.8CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Trivy's own label is CRITICAL. Rated critical by NVD, Red Hat, Photon OS.

Description

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.0 Base Score 9.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H).

Affected packages and fixed versions

SourcePackageFixed in
Photon OS 4.0openjdk8, openjdk8-doc, openjdk8-sample and 2 more1.8.0.382-1.ph4
chainguardopenjdk-11-openj9, openjdk-17-openj9, openjdk-21-openj9 and 3 more0.53.0-r0 and 2 more
debian 11openjfx8u141-b14-1
debian 12openjfx8u141-b14-1
debian 13openjfx8u141-b14-1
debian 14openjfx8u141-b14-1
debian 9openjfx8u141-b14-3~deb9u1
echoopenjfx8u141-b14-1
Show all 17 entries from 8 sources
SourcePackageFixed in
Photon OS 4.0openjdk81.8.0.382-1.ph4
Photon OS 4.0openjdk8-doc1.8.0.382-1.ph4
Photon OS 4.0openjdk8-sample1.8.0.382-1.ph4
Photon OS 4.0openjdk8-src1.8.0.382-1.ph4
Photon OS 4.0openjre81.8.0.382-1.ph4
chainguardopenjdk-11-openj90.53.0-r0
chainguardopenjdk-17-openj90.53.0-r0
chainguardopenjdk-21-openj90.53.0-r0
chainguardopenjdk-25-openj90.59.0-r1
chainguardopenjdk-26-openj90.59.0-r1
chainguardopenjdk-8-openj90.53.0-r1
debian 11openjfx8u141-b14-1
debian 12openjfx8u141-b14-1
debian 13openjfx8u141-b14-1
debian 14openjfx8u141-b14-1
debian 9openjfx8u141-b14-3~deb9u1
echoopenjfx8u141-b14-1

References

All 12 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.