appears a lot of ‘flaws’ are there on function and much more included (or changed) with each new iteration of browser and HTML Edition.
Oracle hasn't commented on statements from the reliable researcher that this https://bookmarks-hit.com/story18304605/5-easy-facts-about-jpg-exploit-new-described