๐ฅ This vulnerability is being actively exploited in the wild (CISA Known Exploited Vulnerabilities catalog)
CVE-2012-5076: Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allow
Summary
CVE-2012-5076 is a vulnerability in Oracle Java SE 7 Update 7 and earlier versions that affects the JAX-WS (Java web services framework) component in the Java Runtime Environment. Remote attackers could exploit this flaw to compromise confidentiality (reading data), integrity (modifying data), and availability (disrupting service) of affected systems.
Solution / Mitigation
Apply updates per vendor instructions. The source references Oracle's October 2012 security advisory (http://www.oracle.com/technetwork/topics/security/javacpuoct2012-1515924.html) as a patch vendor advisory with available fixes.
Vulnerability Details
9.8(critical)
EPSS: 91.7%
๐ฅ Actively Exploited
Classification
Taxonomy References
Original source: https://nvd.nist.gov/vuln/detail/CVE-2012-5076
First tracked: February 15, 2026 at 08:43 PM
Classified by LLM (prompt v3) ยท confidence: 95%