CVE-2017-10067

CVE-2017-10067 is a difficult-to-exploit vulnerability in the Java SE component (Security subcomponent) affecting versions 6u151, 7u141, and 8u131. It allows an unauthenticated attacker with network access to compromise Java SE, specifically in client-side deployments running sandboxed Java Web Start applications or applets that load untrusted code. Successful attacks require user interaction and can lead to a complete takeover of the Java SE environment, resulting in high confidentiality, integrity, and availability impacts, as reflected by its CVSS v3.0 score of 7.5 (High). Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.