Oracle Releases Out-of-Band Patch to Address Java 7 Vulnerabilities
Oracle has released an out-of-band patch to address multiple vulnerabilities in the Java Runtime Environment (JRE) 7 Update 11 and earlier. These vulnerabilities may allow an attacker to execute arbitrary code.
US-CERT encourages users and administrators to review the bulletin and follow best-practice security policies to determine which updates should be applied.
See Vulnerability Note VU#858729 for more information.
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-3502 TrueConf Client…