Oracle has released Java JDK/JRE 8 update 73 for Windows only to fix an issue that could result in a system compromise when Java is installed for the first time on a system. There are several conditions that have to be met for the compromise to take place during installation, and if you already have Java installed you don’t need to update. If you have a copy of a Java installer older than 8u73 that you are saving for a later install, you should delete it
and get a copy of the new installer.
For more information, including the conditions that have to be met for a system compromise to occur, please see http://www.oracle.com/technetwork/topics/security/alert-cve-2016-0603-2874360.html.