First of all, JavaScript is not Java. It has nothing to do with Java (The language and its associated technologies from Sun Microsystems). To be honest, I'm not even sure why it's called JavaScript.
Researchers from the Polish firm Security Explorations have identified a serious vulnerability in the latest version of Java that completely bypasses the new security level Oracle recently introduced ...