Java Security Update Scrubs 14 Flaws

Summary: Oracle released a critical update fixing at least 14 security vulnerabilities in its Java JRE software, shipping as Java 6 Update 31 and Java 7 Update 3, and urged users to apply the fixes as soon as possible. Oracle estimates Java is installed on more than three billion machines worldwide, and the article notes that failing to keep Java updated leaves users dangerously vulnerable to attacks.
Why it matters: With Java on more than three billion machines and flaws that malware authors actively target, the article's commenters describe the practical trap: payroll and timekeeping applications pinned to old versions like Java 6 Update 15 break when the JVM is updated, so the vulnerable version stays plugged into the browser.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026