Oracle Issues Emergency Java Update

Summary: Oracle released Java 7 Update 17 and Java 6 Update 43 to fix a critical vulnerability, CVE-2013-1493, that security experts warned was being used in targeted attacks against high-profile targets. Oracle said the bug was originally reported on Feb. 1, 2013, too late for the Feb. 19 Critical Patch Update, and that it had planned to fix it in the April 16 release before deciding to ship the patch early.
Bottom line: The flaw was already under active exploitation against high-profile targets before a fix existed, and because Java is cross-platform, the same exploit could deliver payloads to Mac and Linux systems as readily as Windows PCs. Oracle had also intended to stop shipping Java 6 updates at the end of February but reversed course to address this crisis.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2013-1493
Related: Styx Exploit Pack: Domo Arigato, PC Roboto Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026