The security firm Alienvault has already confirmed that the exploit is already being used by many websites to silently install malware and even ransomeware in drive-by download attacks. The exploit was discovered in Java 7 update 10. The latest zero-day vulnerability was discovered a few days ago. We receive news about critical vulnerabilities in Java every now and then. Since Oracle bought Java, it has been in crisis.
