Apple Ships Java Security Update
Summary: Apple released an update fixing at least 30 security vulnerabilities in its version of Java for Mac OS X, addressing a flaw Oracle had shipped more than a month earlier that attackers were using to install malicious software on Microsoft Windows systems. The update is available for Mac OS X v10.5.8 and v10.6.3 or later via Apple Downloads or Software Update, and brings Java on the Mac to Java 6 Update 20.
Key Takeaway: The flaw Apple patched had already been exploited in the wild against Windows systems for over a month before the Mac fix arrived, leaving a window in which the same Java weakness sat unpatched on Macs.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026