Skip to content
October 5, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Technology
  • Java 10 Official Released
  • Technology

Java 10 Official Released

Do Son March 21, 2018 2 minutes read
java 10
Add Daily CyberSecurity as a preferred source on Google

Java 10 has been officially released! You can download the official version of Java 10 here. To iterate faster and follow up on community feedback, the Java release cycle changed to every six months and promised not to skip tickets. The new release cycle will also strictly follow the time point and will be released in March and September of each year.

Java 10 is the first version to adopt a new release cycle, offering 109 new features, of which the most interesting one is the type inference of local variables.

12 key new features of Java 10:

  • JEP 286: Inference of types of local variables. This feature was discussed in the community for a long time and a survey was conducted to see  JEP 286 survey results
  • JEP 296: Merging JDK’s Multiple Code Repositories into a Repository
  • JEP 304: Garbage Collector Interface. Improve the source code isolation of different garbage collectors by introducing a clean garbage collector (GC) interface.
  • JEP 307: Introducing Parallel Full GC to G1
  • JEP 310: Application Data Sharing. To improve startup and footprint, expand again on existing Class Data Sharing (“CDS”) functionality to allow application classes to be placed in shared archives
  • JEP 312: Thread-local control. Allows stopping a single thread instead of only enabling or stopping all threads
  • JEP 313: Removing Native-Header Generation Tool (javah)
  • JEP 314: Extra Unicode Language Tag Extensions. Including cu (currency type), fw (week of the first day of the week), rg (area coverage), tz (time zone), etc.
  • JEP 316: Allocate heap memory on spare memory devices. Allow HotSpot VMs to allocate Java object heap on spare memory devices
  • JEP 317: Java-based JIT Compiler (trial version)
  • JEP 319: Root certificate. Root certificate in open source Java SE Root CA program
  • JEP 322: Time-based release model. “Features releases” version will contain new features, “Update releases” version only fix bugs

Related coverage

  • A New Way to Pay: Apple Wallet Is Getting a New Security Feature
  • Microsoft Quantum Development Kit official support Linux & MacOS
  • Opera Browser Operator: AI Handles Web Tasks, No Cloud Needed
  • Meta Shifts Real Name Policy: Facebook Groups Now Allow Custom Nicknames & Avatars
  • OneNote Windows 10: Support Ends October 2025, Migrate Now
  • Security First: Microsoft Overhauls Corporate Policy After Years of Criticism
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our tech and OS security coverage helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: java 10

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intelCISA KEV📅 Added to KEV: Oct 4, 2026📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-100786CVSS 9.6
    Sandbox escape due to use-after-free in the Graphics component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird...
    📅 Updated: Oct 5, 2026
  • CVE-2026-100787CVSS 9.6
    Sandbox escape in the XUL component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4,...
    📅 Updated: Oct 5, 2026
  • CVE-2026-56154CVSS 9.8
    Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) This issue affects Apache HTTP...
    📅 Updated: Oct 5, 2026
  • CVE-2026-57941CVSS 9.8
    Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This issue affects Apache HTTP Server:...
    📅 Updated: Oct 5, 2026
  • CVE-2026-105215CVSS 9.3
    ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because...
    📅 Updated: Oct 5, 2026
  • CVE-2026-105222CVSS 9.1
    The alexpechkarev/google-maps Laravel package through 12.16 disables TLS certificate verification by default because the bundled config sets ssl_verify_peer...
    📅 Updated: Oct 5, 2026
  • CVE-2026-59797CVSS 9.8
    Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related expressions. This issue affects Apache...
    📅 Updated: Oct 5, 2026
  • CVE-2026-100102CVSS 9.5
    Perforce P4 Search container images prior to 2026.4.2 enable an unauthenticated Java debug interface. An attacker with network access to...
    📅 Updated: Oct 5, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.