CVE-2017-1376

CVE-2017-1376 is a vulnerability in IBM’s J9 VM (IBM Java) where the class verifier flaw allows untrusted code to disable the security manager and escalate privileges. The relevant connected material indicates remediation via updating IBM Java/JRE to newer builds (e.g., IBM Java 8.0-5.41 or later...

JDK: unspecified full Java sandbox bypass fixed in Feb 2015 update

Unspecified vulnerability in the Java Virtual Machine JVM in IBM SDK, Java Technology Edition 5.0 before SR16-FP9, 6 before SR16-FP3, 6R1 before SR8-FP3, 7 before SR8-FP10, and 7R1 before SR2-FP10 allows remote attackers to escape the Java sandbox and execute arbitrary code via unspecified vector...