Yes -
Java desktop and server applications are basically
secure. ...
Java has had a lot of vulnerabilities; almost all of them are "sandbox escapes". In other words, if you're running an old version of
Java, a malicious applet can break out of the sandbox and take control of your computer.
read more >>