Oracle has released an emergency update for java

Oracle has released an update for Java that closes a dangerous vulnerability in software with the identifier CVE-2016-0636. The update is addressed to the Java Standart Edition (SE) platform, while increasing the version number to 8u77 (the current version). The vulnerability is relevant only for Java plug-ins in web browsers and does not affect other software releases, for example, used to run standalone applications in Windows.



The vulnerability is of the Remote Code Execution type and can be used by attackers for remote code execution in a web browser. In this scenario, the user needs to go to a web page with malicious content. Vulnerabilities assigned critical danger level CVSS 9.3. We recommend that users of OSs such as Windows, Solaris, Linux, OS X install this update as soon as possible.