onyx

onyx --cves cve-2014-1876

CVE-2014-1876

MEDOpenJDK
score
<0.1
cvss
4.4
epss
0.5%
published
2014-02-10
kev added
—
first seen

OpenJDK 6, 7, 8; Oracle Java SE 5.0u61, 6u71, 7u51, 8; JRockit R27.8.1, R28.3.1; and Java SE Embedded 7u51 contain a symlink attack vulnerability in unpacker::redirect_stdio caused by insecure temporary file creation in unpack.cpp, letting local users overwrite arbitrary files, exploit requires local user access and symlink creation.

Timeline

How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.

events2014-02-10 — PublishedP2026-10-21 — Tracked by OnyxTscore2026-10-21: score <0.1<0.1epss2026-09-22: epss 0.5%2026-09-23: epss 0.5%2026-09-24: epss 0.5%2026-09-25: epss 0.5%2026-09-26: epss 0.5%2026-09-27: epss 0.5%2026-09-28: epss 0.5%2026-09-29: epss 0.5%2026-09-30: epss 0.5%2026-10-01: epss 0.5%2026-10-02: epss 0.5%2026-10-03: epss 0.5%2026-10-04: epss 0.5%2026-10-05: epss 0.5%2026-10-06: epss 0.5%2026-10-07: epss 0.5%2026-10-08: epss 0.5%2026-10-09: epss 0.5%2026-10-10: epss 0.5%2026-10-11: epss 0.5%2026-10-12: epss 0.5%2026-10-13: epss 0.5%2026-10-14: epss 0.5%2026-10-15: epss 0.5%2026-10-16: epss 0.5%2026-10-18: epss 0.5%2026-10-19: epss 0.5%2026-10-20: epss 0.5%2026-10-21: epss 0.5%0.5%mentions/day0no mentions in 30 days2026-09-22today
  1. Published
  2. Tracked by Onyx

Weaknesses

CWE-59

References 22