Oracle Java SE 7 Update 6 and earlier contains multiple sandbox bypass vulnerabilities via the ClassFinder and forName methods, enabling complete sandbox escape for untrusted applets. Massively exploited by exploit kits in 2012.
Java
Oracle
Authentication Bypass
RCE
NVD
Exploit-DB
VulDB
CVSS 3.1
9.8
EPSS
94.1%
Threat
9.8