Oracle Critical Patch Update Pre-Release Announcement
This Critical Patch Update Pre-Release Announcement provides advance information about the Oracle Critical Patch Update for January 2015, which will be released on Tuesday, January 20, 2015. While this Pre-Release Announcement is as accurate as possible at the time of publication, the information it contains may change before publication of the Critical Patch Update Advisory.
 
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
 
Oracle Java SE
This Critical Patch Update contains 19 new security fixes for Oracle Java SE.
14 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password.

The highest CVSS Base Score of vulnerabilities affecting Oracle Java SE is 10.0.

The Oracle Java SE components affected by vulnerabilities that are fixed in this Critical Patch Update are:
• Java SE
• Java SE Embedded
• JRockit

Affected versions:
Oracle Java SE, version(s) 5.0u75, 6u85, 7u72, 8u25
Oracle Java SE Embedded, version(s) 7u71
Oracle JRockit, version(s) R27.8.4, R28.3.4
 
Note: As of April 8, 2014 Microsoft stopped supporting Windows XP and therefore it is no longer an officially supported platform. Users may still continue to use Java 7 updates on Windows XP at their own risk, but support will only be provided against Microsoft Windows releases Windows Vista or later. See Third Party Vendor-Specific Support Terms on Oracle Software Technical Support Policies (pdf) for details. Here to download the Latest: http://www.oracle.com/technetwork/java/javase/downloads/jre7-downloads-1880261.html

 
Visit here on the 20th of January to get this new Build: http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html or here: http://java.com/en/download/manual.jsp
Be sure to uncheck any unwanted add-ons PUA's during install.
 
Thanks,
 
Daniel 😉