Exploit reported (with proof of concept) yesterday to Oracle by Security Explorations. They are withholding public PoC disclosure for now.
»
www.computerworld.com/s/ ··· omyId=85Notably, Security Explorations claims they alerted Oracle in April to the flaw patched by Thursday's JRE 7,u7. Along with a list of 29 know exploits.