Java 6 Update 26 Fixes Critical Security Issues
Oracle has released update 26 for its Java SE 6 platform in order to address a number of seventeen remotely exploitable vulnerabilities, many of which could result in arbitrary code execution.
Of the included patches, eleven apply only to the Java SE client and one only to the server version. The rest affect both of the platform's flavors. Nine vulnerabilities carry the maximum score of 10 on the CVSS scale. This means that they can be exploited remotely with ease and no authentication resulting in a complete confidentiality, integrity and availability compromise.