Researchers have discovered a new vulnerability in the Java Reflection API that can be exploited by a decade-old attack.

Oracle’s Critical Patch update addresses 154 vulnerabilities. Details were published on a number of Java flaws in the Java Reflection API.

According to Gowdiak, the vulnerability is located in the Reflection API (application programming interface), a feature that was introduced in Java 7 and which has been the source of many critical ...