Critical Java Update Fixes 50 Security Holes
Summary: Oracle released an accelerated Java SE update fixing at least 50 security holes, including one it said was actively exploited in the wild, moving up a Critical Patch Update originally scheduled for February 19, 2013. The release covers Java 7 Update 13 and Java 6 Update 39, and Oracle said no further updates would come for Java 6 after February 2013.
Key Takeaway: Oracle's own SolarWinds source noted that of 84 vulnerabilities identified since Java 7's release, 66 also existed in Java 6 - so any flaw found in Java 7 that also lives in Java 6 will never be patched after February 2013.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026