For JVM, consider this update which happened in 2016: "Multiple flaws were discovered in the Hotspot and Libraries components in OpenJDK. An untrusted Java app

For JVM, consider this update which happened in 2016: "Multiple flaws were discovered in the Hotspot and Libraries components in OpenJDK. An untrusted Java application or applet could use these flaws to completely bypass Java sandbox restrictions. (CVE-2016-3606, CVE-2016-3587, CVE-2016-3598, CVE-2016-3610)" https://access.redhat.com/errata/RHSA-2016:1458 https://access.redhat.com/errata/RHSA-2016:1458