CVE-2012-5076 Oracle Java SE Sandbox Bypass

Exploited in the wild Critical 9.8 Published 16 Oct 2012 Updated 22 Oct 2025

Remote attackers can compromise confidentiality, integrity, and availability in the Java Runtime Environment via JAX-WS vulnerabilities.

Exploited in the wild: Since 28 Mar 2022
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2012-5076?

CVE-2012-5076 is a critical vulnerability in Oracle Jre, published on 16 Oct 2012. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to JAX-WS.

Weakness: CWE-284

Which versions are affected by CVE-2012-5076?

It affects 2 products.

Products include Oracle Jre, Suse Linux Enterprise Desktop.

How do I fix CVE-2012-5076?

Upgrade to a fixed version. US federal agencies must fix it by 18 Apr 2022.

Is CVE-2012-5076 being exploited?

Yes. Attackers have exploited CVE-2012-5076 in the wild since at least 28 Mar 2022.

Public exploit code: 2 Metasploit modules and 2 Exploit-DB entries.

All Oracle Jre vulnerabilities

Sources

Also known as GHSA-v7gg-cccr-jpfx.