Java vulnerabilities and the Arduino IDE

[eried]

There is some description of the vulnerabilities java has? I mean, I think installing java is more harmful than using an old version from the arduino folder.