content: The installer bootstrapper, which already runs with elevated privileges and extracts the MSI package that does the actual installation, is vulnerable to them. Personally I've been just using the tarball Oracle provides (e.g., jre-8u74-windows-x64.tar.gz or jdk-8u74-windows-x64.tar.gz), extract it and point my Java IDE (JAVA_HOME env variable) or Minecraft to use it. So can I still use some Java applications I can trust without having it actually “installed”.