> I can't recall a major one that was actually tied to the JVM itself since dropped applets. Not exactly tied to the JVM, but IIRC one of the prerequisites for

> I can't recall a major one that was actually tied to the JVM itself since dropped applets. Not exactly tied to the JVM, but IIRC one of the prerequisites for the Spring4Shell vulnerability was the existence of a new method added by Java 9. If you were still on Java 8, you were not affected.