---
id: CVE-2016-0475
title: >-
  Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit
  components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8
  allows remote attackers to affect confidentiality and integrity via unknown
  vectors rel…
summary: >-
  Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit
  components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8
  allows remote attackers to affect confidentiality and integrity via unknown
  vectors rel…
severity: medium
cvss: 5.8
cvssVector: 'AV:N/AC:M/Au:N/C:P/I:P/A:N'
vendor: oracle
product: jdk
affected:
  - jdk = 1.8.0
  - jre = 1.8.0
  - jrockit = r28.3.8
published: '2016-01-21'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T16:17:12.213'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2016-0475'
references:
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0049.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0050.html'
    label: secalert_us@oracle.com
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0055.html'
    label: secalert_us@oracle.com
  - url: 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'
    label: secalert_us@oracle.com
  - url: >-
      http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
    label: secalert_us@oracle.com
  - url: 'http://www.securitytracker.com/id/1034715'
    label: secalert_us@oracle.com
  - url: 'https://kc.mcafee.com/corporate/index?page=content&id=SB10148'
    label: secalert_us@oracle.com
  - url: 'https://security.gentoo.org/glsa/201610-08'
    label: secalert_us@oracle.com
  - url: 'http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00038.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0049.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0050.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://rhn.redhat.com/errata/RHSA-2016-0055.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: >-
      http://www.oracle.com/technetwork/topics/security/linuxbulletinjan2016-2867209.html
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'http://www.securitytracker.com/id/1034715'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://kc.mcafee.com/corporate/index?page=content&id=SB10148'
    label: af854a3a-2127-422b-91ae-364da2661108
  - url: 'https://security.gentoo.org/glsa/201610-08'
    label: af854a3a-2127-422b-91ae-364da2661108
tags:
  - nvd
  - cve.org
epss: 0.03663
epssPercentile: 0.89579
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-15T15:15:36.294718Z'
ingestedAt: '2026-10-15T16:13:11.609Z'
---

## Overview

Unspecified vulnerability in the Java SE, Java SE Embedded, and JRockit components in Oracle Java SE 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries.

## Affected

- `jdk = 1.8.0`
- `jre = 1.8.0`
- `jrockit = r28.3.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.