Java array vulnerability found earlier this year–and targeted by Flashback–was successfully exploited by the exploit kit between 76% and 97% of the time. Some vulnerabilities can be exploited via Java Virtual Machine shell bytecode, “meaning exploitation will be successful regardless of the operating system” A variant of the Tsunami malware that can target both OS X and Linux systems may already be using the new Java vulnerabilities to infect systems. One piece of good news for Mac users is that only Java 6 is included by Apple in OS X.”]
Source: https://www.darkreading.com/attacks-breaches/java-zero-day-malware-attack-6-facts