CVE-2010-0840

An unspecified vulnerability in Oracle's Java Runtime Environment (JRE) was actively exploited in the wild, affecting confidentiality, integrity, and availability.

Oracle's JRE contains an unspecified vulnerability that allows remote attackers to compromise confidentiality, integrity, and availability. This failure matters to DIB organizations because the Java runtime is ubiquitous in enterprise environments, and unpatched JREs are a primary vector for ransomware and data breaches. Organizations must rigorously patch JREs and monitor for KEV-listed exploits to prevent lateral movement and compliance violations.

Shame score — The vulnerability was actively exploited in the wild (KEV-listed), indicating a failure to patch a known or exploitable flaw before adversaries weaponized it, which is a severe negligence failure.