CVE-2013-0426

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2013-0425 and CVE-2013-0428. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to incorrect "access control checks" in the logging API that allow remote attackers to bypass Java sandbox restrictions.

• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907346
• http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS
• http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html
• http://marc.info/?l=bugtraq&m=136439120408139&w=2
• http://marc.info/?l=bugtraq&m=136570436423916&w=2
• http://marc.info/?l=bugtraq&m=136733161405818&w=2
• http://rhn.redhat.com/errata/RHSA-2013-0236.html
• http://rhn.redhat.com/errata/RHSA-2013-0237.html
• http://rhn.redhat.com/errata/RHSA-2013-0245.html
• http://rhn.redhat.com/errata/RHSA-2013-0246.html
• http://rhn.redhat.com/errata/RHSA-2013-0247.html
• http://rhn.redhat.com/errata/RHSA-2013-1455.html
• http://rhn.redhat.com/errata/RHSA-2013-1456.html
• http://security.gentoo.org/glsa/glsa-201406-32.xml
• http://www.kb.cert.org/vuls/id/858729US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:095
• http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.htmlVendor Advisory
• http://www.securityfocus.com/bid/57711
• http://www.us-cert.gov/cas/techalerts/TA13-032A.htmlUS Government Resource
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15888
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19261
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19471
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19484
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056
• http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907346
• http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS
• http://icedtea.classpath.org/hg/release/icedtea7-forest-2.3/jdk/rev/ce105dd2e4de
• http://lists.opensuse.org/opensuse-security-announce/2013-02/msg00014.html
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00001.html
• http://lists.opensuse.org/opensuse-security-announce/2013-03/msg00034.html
• http://marc.info/?l=bugtraq&m=136439120408139&w=2
• http://marc.info/?l=bugtraq&m=136570436423916&w=2
• http://marc.info/?l=bugtraq&m=136733161405818&w=2
• http://rhn.redhat.com/errata/RHSA-2013-0236.html
• http://rhn.redhat.com/errata/RHSA-2013-0237.html
• http://rhn.redhat.com/errata/RHSA-2013-0245.html
• http://rhn.redhat.com/errata/RHSA-2013-0246.html
• http://rhn.redhat.com/errata/RHSA-2013-0247.html
• http://rhn.redhat.com/errata/RHSA-2013-1455.html
• http://rhn.redhat.com/errata/RHSA-2013-1456.html
• http://security.gentoo.org/glsa/glsa-201406-32.xml
• http://www.kb.cert.org/vuls/id/858729US Government Resource
• http://www.mandriva.com/security/advisories?name=MDVSA-2013:095
• http://www.oracle.com/technetwork/topics/security/javacpufeb2013-1841061.htmlVendor Advisory
• http://www.securityfocus.com/bid/57711
• http://www.us-cert.gov/cas/techalerts/TA13-032A.htmlUS Government Resource
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15888
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19261
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19471
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A19484
• https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0056

Published

Feb 2, 2013

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-0420Unspecified vulnerability in the VirtualBox component in Ora…
• CVE-2013-0421Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2013-0422Multiple vulnerabilities in Oracle Java 7 before Update 11 a…9.8
• CVE-2013-0423Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-0424Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-0425Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-0427Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-0428Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-0429Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-0430Unspecified vulnerability in the Java Runtime Environment (J…
• CVE-2013-0431Unspecified vulnerability in the Java Runtime Environment (J…5.3
• CVE-2013-0432Unspecified vulnerability in the Java Runtime Environment (J…