Most of the time it’s because users neglect updating it to the latest versions, which, as with any other software, creates a major security risk.
This is especially alarming because the programming language is installed on as much as 65% of all computers in the US alone. Java is known for its security flaws - to this day, over a hundred vulnerabilities have been identified.
