Oracle Java SE 7 Update 6 and earlier contains multiple sandbox bypass vulnerabilities via the ClassFinder and forName methods, enabling complete sandbox escape for untrusted applets. Massively exploited by exploit kits in 2012.
Authentication Bypass
RCE
Java
Oracle
Red Hat
+6
NVD
Exploit-DB
VulDB
CVSS 3.1
9.8
EPSS
94.1%
Threat
9.8