Security researchers are claiming that all latest versions of Java are susceptible to a sandbox bypass, and have sent their code to Oracle as proof. Written by Michael Lee, Contributor Sept. 25 ...

According to both crimeware authors, the vulnerability exists in all versions of Java 7, including the latest — Java 7 Update 10.