Findings

CVE-2015-4840

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.

Published Oct 21, 2015 · updated Oct 14, 2026 · oracle jdk

Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 21, 2015 · NIST NVD

    Detected

    Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.

  3. Oct 14, 2026 · NIST NVD

    Updated

    Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.

Affected

  • cpe oracle/jdk1.7.0
  • cpe oracle/jdk1.8.0
  • cpe oracle/jre1.7.0
  • cpe oracle/jre1.8.0

Sources

  • CVE.orgVulnerability recordCVE-2015-4840

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2015-4840

    30-day exploitation probability 4.0%

    first.org
  • NIST NVDVulnerability recordCVE-2015-4840

    Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D.

    nvd.nist.gov

References