Sun Microsystems has released updated to cover number of vulnerabilities in JDK/JRE. Affected versions are JDK and JRE 6 Update 5, JDK and JRE 5.0 Update 15, SDK and JRE 1.4.2_17 and SDK and JRE 1.3.1_22 and fixes some of following reported vulnerabilities: two security vulnerabilities in the Java Runtime Environment Virtual Machine may independently allow an untrusted application or applet that is downloaded from a website to elevate its privileges, a security vulnerability in the Java Runtime Environment (JRE) with the processing of XSLT transformations may allow an untrusted applet or application that is downloaded from a website to elevate its privileges, a vulnerability in Java Web Start may allow an untrusted Java Web Start application to elevate its privileges.