I found an artile written by Shawn Knight about a Researcher, Adam Gowdiak, who uncovered a Java vulnerability. Apparently this is in versions 5, 6, and 7 and could allow malware to be installed. This apparently effects both Mac and PC. Oracle confirmed the vulnerability with Adam and said it will be patched in a future security update. No mention on when this would actually occur.
Full Article: Researcher uncovers new Java exploit, 1 billion Macs and PCs at risk