CVE-2016-0603

Unspecified vulnerability in the Java SE component in Oracle Java SE 6u111, 7u95, 8u71, and 8u72, when running on Windows, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install. NOTE: the previous information is from Oracle's Security Alert for CVE-2016-0603. Oracle has not commented on third-party claims that this is an untrusted search path issue that allows local users to gain privileges via a Trojan horse dll in the "application directory."

• http://seclists.org/fulldisclosure/2016/Feb/54
• http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/537462/100/0/threaded
• http://www.securityfocus.com/bid/83008
• http://www.securitytracker.com/id/1034969
• https://security.gentoo.org/glsa/201610-08
• https://security.netapp.com/advisory/ntap-20160217-0001/
• http://seclists.org/fulldisclosure/2016/Feb/54
• http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/537462/100/0/threaded
• http://www.securityfocus.com/bid/83008
• http://www.securitytracker.com/id/1034969
• https://security.gentoo.org/glsa/201610-08
• https://security.netapp.com/advisory/ntap-20160217-0001/

Published

Feb 8, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-0597Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0598Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0599Unspecified vulnerability in Oracle MySQL 5.7.9 allows remot…
• CVE-2016-0600Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0601Unspecified vulnerability in Oracle MySQL 5.7.9 allows remot…
• CVE-2016-0602Unspecified vulnerability in the Oracle VM VirtualBox compon…
• CVE-2016-0604Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-0605Unspecified vulnerability in Oracle MySQL 5.6.26 and earlier…
• CVE-2016-0606Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0607Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier…
• CVE-2016-0608Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…
• CVE-2016-0609Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier…