| Max CVSS | 7.2 | Min CVSS | 7.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2014-7911 | 7.2 |
luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0.0 does not verify that deserialization will result in an object that met the requirements for serialization, which allows attacker
|
16-12-2014 - 18:14 | 15-12-2014 - 18:59 |