papamike writes:  

Oracle has released critical updates for its Java SE and Java for Business technologies to address numerous remote code execution vulnerabilities and other security issues.

The vendor has provided JDK (Java Development Kit) and JRE (Java Runtime Environment) 6 Update 22 for Windows, Solaris, and Linux for both Java SE and Java for Business.

The updates fix a total number of 29 vulnerabilities in various Java components, of which 28 can be exploited remotely without the need of authentication.

In addition, 15 of them scored 10.0 (maximum) on the Common Vulnerability Scoring System (CVSS) v2 scale, because they have a low access complexity and result in complete compromise of confidentiality, integrity and availability.

Read More ...