Another critical Java vulnerability puts 1 billion users at risk