AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2010-1423

HIGH · CVSS 9.3 EPSS 55.58%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2010-04-15 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 9.3. It affects Windows, Linux, Java. Its EPSS score suggests a 55.6% probability of exploitation in the next 30 days. It may be remotely exploitable.

CVE
CVE-2010-1423
Severity
HIGH
CVSS
9.3
EPSS
55.58%
Windows Linux Java

Original NVD Description

Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2) -XXaltjvm argument to javaws.exe, which is processed by the launch method. NOTE: some of these details are obtained from third party information.