CVE-2010-0840

Confirmed PUBLISHED

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and...

Oracle · Java SE

Exploited in the wild PoC available

Recommended Action

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.

View KEV Feed Talk to Sales

Confidence

Confirmed

Exploitation Status

Exploited in the wild

Observed in Sensors

Attempts (30d)

—

Unique Attacker IPs

—

CISA KEV

In CISA KEV

CVSS / EPSS

9.8 Critical

At a Glance

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is related to improper checks when executing privileged methods in the Java Runtime Environment (JRE), which allows attackers to execute arbitrary code via (1) an untrusted object that extends the trusted class but has not modified a certain method, or (2) "a similar trust issue with interfaces," aka "Trusted Methods Chaining Remote Code Execution Vulnerability."

metasploit java cisa

CVE Published: Apr 01, 2010
Exploitation Reported: May 25, 2022
CVSS: 9.8 Critical
EPSS: —

Remote Low complexity No user interaction Unauthenticated

Affected Versions

Vendor	Product	Version	Status
n/a	n/a	n/a	Affected

CVE References

APPLE-SA-2010-05-18-1 lists.apple.com · Vendor Advisory http://lists.apple.com/archives/security-announce/2010//May/msg00001....
HPSBMU02799 marc.info · Vendor Advisory http://marc.info/?l=bugtraq&m=134254866602253&w=2
RHSA-2010:0383 redhat.com · Vendor Advisory http://www.redhat.com/support/errata/RHSA-2010-0383.html
RHSA-2010:0338 redhat.com · Vendor Advisory http://www.redhat.com/support/errata/RHSA-2010-0338.html
APPLE-SA-2010-05-18-2 lists.apple.com · Vendor Advisory http://lists.apple.com/archives/security-announce/2010//May/msg00002....

Show 35 more references

SUSE-SR:2010:011 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001...
SSRT100179 itrc.hp.com · Vendor Advisory http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751
SSRT100089 marc.info · Vendor Advisory http://marc.info/?l=bugtraq&m=127557596201693&w=2
RHSA-2010:0339 redhat.com · Vendor Advisory http://www.redhat.com/support/errata/RHSA-2010-0339.html
SUSE-SR:2010:008 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001...
RHSA-2010:0471 redhat.com · Vendor Advisory http://www.redhat.com/support/errata/RHSA-2010-0471.html
SUSE-SR:2010:017 lists.opensuse.org · Vendor Advisory http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006...
USN-923-1 ubuntu.com · Vendor Advisory http://ubuntu.com/usn/usn-923-1
RHSA-2010:0337 redhat.com · Vendor Advisory http://www.redhat.com/support/errata/RHSA-2010-0337.html
RHSA-2010:0489 redhat.com · Vendor Advisory http://www.redhat.com/support/errata/RHSA-2010-0489.html
MDVSA-2010:084 mandriva.com · Vendor Advisory http://www.mandriva.com/security/advisories?name=MDVSA-2010:084
39317 secunia.com · Third-Party Advisory http://secunia.com/advisories/39317
40545 secunia.com · Third-Party Advisory http://secunia.com/advisories/40545
39819 secunia.com · Third-Party Advisory http://secunia.com/advisories/39819
43308 secunia.com · Third-Party Advisory http://secunia.com/advisories/43308
39292 secunia.com · Third-Party Advisory http://secunia.com/advisories/39292
39659 secunia.com · Third-Party Advisory http://secunia.com/advisories/39659
40211 secunia.com · Third-Party Advisory http://secunia.com/advisories/40211
ADV-2010-1454 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2010/1454
oval:org.mitre.oval:def:13971 oval.cisecurity.org · VDB Entry https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m...
ADV-2010-1107 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2010/1107
ADV-2010-1793 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2010/1793
ADV-2010-1523 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2010/1523
39065 securityfocus.com · VDB Entry http://www.securityfocus.com/bid/39065
oval:org.mitre.oval:def:9974 oval.cisecurity.org · VDB Entry https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.m...
ADV-2010-1191 vupen.com · VDB Entry http://www.vupen.com/english/advisories/2010/1191
20100405 ZDI-10-056: Sun Java Runtime Environment Trusted Methods Chaining Remote Code Execution Vulnerability securityfocus.com · Mailing List http://www.securityfocus.com/archive/1/510528/100/0/threaded
20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX securityfocus.com · Mailing List http://www.securityfocus.com/archive/1/516397/100/0/threaded
oracle.com/technetwork/topics/security/cpuoct2010-17562... oracle.com · CVE Record http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
oracle.com/technetwork/topics/security/javacpumar2010-0... oracle.com · CVE Record http://www.oracle.com/technetwork/topics/security/javacpumar2010-0833...
support.apple.com/kb/HT4170 support.apple.com · CVE Record http://support.apple.com/kb/HT4170
vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html vmware.com · CVE Record http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html
vmware.com/security/advisories/VMSA-2011-0003.html vmware.com · CVE Record http://www.vmware.com/security/advisories/VMSA-2011-0003.html
zerodayinitiative.com/advisories/ZDI-10-056 zerodayinitiative.com · CVE Record http://www.zerodayinitiative.com/advisories/ZDI-10-056
support.apple.com/kb/HT4171 support.apple.com · CVE Record http://support.apple.com/kb/HT4171

Recommended Actions

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
Check enrichment artifacts for scanner coverage and available PoCs before rolling remediation validation.
Use the Pro API to automate enrichment, telemetry, and workflow delivery for VM, SOC, and CTI pipelines.

Known Exploited Vulnerability Sources

Catalogues that list this CVE as a known exploited vulnerability.

Per-source evidence links for KEV attestations are available through the KEVIntel Pro API.

Learn about Pro API access

Source	Added
CISA First	2022-05-25 00:00 UTC

Scanner Artifacts

Nuclei and Metasploit references linked to this CVE.

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_trusted_chain.rb	Apr 28, 2025

CVSS Scores

CVSS v3.1 9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 7.5 High

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitation Status

Exploited in the wild

Recorded 2022-05-25 00:00:00 UTC · CISA

Proof of concept available

Recorded 2025-04-28 15:02:16 UTC

Scanner Integrations

Scanner	Reference	Detected
Metasploit	https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/java_trusted_chain.rb	Apr 28, 2025

Potential Proof of Concepts

These PoCs are unverified and could contain malware. Use at your own risk.

java_trusted_chain

metasploit · Created Unknown

Metasploit module for CVE-2010-0840

Automate This Intelligence with the Pro API

Confidence scoring, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.

View Pro Pricing View API Docs

Pro API Example

GET /api/v2/pro/kevs/CVE-2010-0840

{
  "cve_id": "CVE-2010-0840",
  "title": "Unspecified vulnerability in the Java Runtime Environment component in Oracle...",
  "affected_vendor": "Oracle",
  "affected_product": "Java SE",
  "affected_versions": [
    { "vendor": "...", "product": "...", "status": "affected", "display_label": "..." }
  ],
  "confidence": "Confirmed",
  "cvss_score": 9.8,
  "epss_score": null,
  "exploit_status": {
    "exploited_in_the_wild": true,
    "active_exploitation_observed": false
  },
  "sensor_telemetry": { "...": "Pro API fields" },
  "proof_of_concepts": [ "..." ],
  "scanner_integrations": [ "..." ]
}

The free JSON API returns basic KEV fields only. Confidence, telemetry, and artifact enrichment require Pro API access.

CVE-2010-0840

At a Glance

Affected Versions

CVE References

Recommended Actions

Known Exploited Vulnerability Sources

Scanner Artifacts

Virtual Patch

CVSS Scores

Exploitation Status

Scanner Integrations

Potential Proof of Concepts

Timeline

Automate This Intelligence with the Pro API