Oracle Issues Emergency Java Patch for Bug Leading to System Hijack

32

Users have been warned to patch their systems as soon as possible. Oracle has released an emergency patch for Java which fixes a critical bug leading to remote code execution without the need for user credentials.

In a security alert posted Thursday, the tech giant said the flaw, CVE-2016-0636, is rather potent — having achieved a rating of 9.3 through the Common Vulnerability Scoring System. The bug is considered so severe as the flaw “can impact the availability, integrity, and confidentiality of the user’s system.” Oracle Java SE 7 Update 97, and 8 Update 73 and 74 for Windows, Solaris, Linux, and Mac OS X are affected. 

Read more at ZDNet News