{"id":"CVE-2015-4843","title":"Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.","summary":"Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.","severity":"critical","cvss":10,"cvssVector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","vendor":"oracle","product":"jdk","affected":["jdk = 1.6.0","jdk = 1.7.0","jdk = 1.8.0","jre = 1.6.0","jre = 1.7.0","jre = 1.8.0"],"published":"2015-10-21","updated":"2026-10-14","sourceUpdated":"2026-10-14T22:17:09.287","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2015-4843","references":[{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1919.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1920.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1921.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1926.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1927.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1928.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2506.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2507.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2508.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2509.html","label":"secalert_us@oracle.com"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2518.html","label":"secalert_us@oracle.com"},{"url":"http://www.debian.org/security/2015/dsa-3381","label":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","label":"secalert_us@oracle.com"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","label":"secalert_us@oracle.com"},{"url":"http://www.securityfocus.com/bid/77160","label":"secalert_us@oracle.com"},{"url":"http://www.securitytracker.com/id/1033884","label":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2784-1","label":"secalert_us@oracle.com"},{"url":"http://www.ubuntu.com/usn/USN-2827-1","label":"secalert_us@oracle.com"},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","label":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201603-11","label":"secalert_us@oracle.com"},{"url":"https://security.gentoo.org/glsa/201603-14","label":"secalert_us@oracle.com"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00000.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00001.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00003.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00004.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00006.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-12/msg00014.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00005.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1919.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1920.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1921.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1926.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1927.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-1928.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2506.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2507.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2508.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2509.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://rhn.redhat.com/errata/RHSA-2015-2518.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.debian.org/security/2015/dsa-3381","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/77160","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1033884","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2784-1","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.ubuntu.com/usn/USN-2827-1","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://access.redhat.com/errata/RHSA-2016:1430","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-11","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://security.gentoo.org/glsa/201603-14","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available","cve.org"],"epss":0.08934,"epssPercentile":0.95215,"exploits":{"github":1,"githubRepos":["https://github.com/Soteria-Research/cve-2015-4843-type-confusion-phrack"],"checkedAt":"2026-10-27T16:38:16.213Z"},"exploitAvailable":true,"ingestedAt":"2026-10-14T23:00:01.993Z","ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total","timestamp":"2026-10-14T21:24:14.242247Z"},"slug":"CVE-2015-4843","body":"## Overview\n\nUnspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.\n\n## Affected\n\n- `jdk = 1.6.0`\n- `jdk = 1.7.0`\n- `jdk = 1.8.0`\n- `jre = 1.6.0`\n- `jre = 1.7.0`\n- `jre = 1.8.0`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":69,"depthScoreParts":{"impact":55,"likelihood":1.8,"exploitation":12,"ransomware":0},"changes":[]}