Researchers have discovered a new vulnerability in the Java Reflection API that can be exploited by a decade-old attack.

Oracle’s Critical Patch update addresses 154 vulnerabilities. Details were published on a number of Java flaws in the Java Reflection API.