The seemingly endless list of critical zero day bugs found in Java grew longer today with news that one of the flaws fixed in Oracle?s recent patches for the product is under attack and when that bug is paired with another, separate vulnerability, the sandbox in the latest build of Java can be bypassed.