The latest Java security update repairs 50 vulnerabilities, the majority of which can be remotely targeted by attackers in the browser.