Researchers said they've uncovered a flaw in the Java 7 update released by Oracle on Thursday that allows attackers to take complete control of end-user computers.
source : http://arstechnica.com/security/2012/08/critical-bug-discovered-in-newest-java/