We know that Oracle publishes Java updates due to vulnerabilities / security issues and therefore we should make sure that we have installed the latest version of Java.
Now there exist programs like ExcelsiorJet which compile Java applications to native code. I am using such an application and I can see it uses Java 7 Update 75:
0:000> lm vm java start end module name 716b0000 716d0000 java (export symbols) C:\Program Files (x86)\...\bin\java.dll Loaded symbol image file: C:\Program Files (x86)\...\bin\java.dll ... File version: 7.0.750.13 Product version: 7.0.750.13 ... CompanyName: Oracle Corporation ProductName: Java(TM) Platform SE 7 U75
Since the current version is Java 7 Update 80, we can assume that this version has some security issues.
However, since this application will only run its own code and not arbitrary code like a browser plugin does, can I safely assume that this application does not open a security hole on my PC?