Oracle is planning to ship 14 fixes related to Java SE on Tuesday, including a number with the highest level of severity under the CVSS (common vulnerability scoring system) framework. A dozen of the 14 fixes can be exploited by an attacker remotely, with no username or password required. A number of the weaknesses have a CVSS base score of 10.0, the highest possible, but Oracle didn’t provide further specifics. The last Java SE patch release, which was delivered in February, also included 14 fixes.”]
Source: https://www.csoonline.com/article/2131833/oracle-to-issue-14-patches-for-java-se.html