This is not actually on the Project "Minecraft Launcher", instead it belongs to the "Minecraft Windows installer".
As far as I know it is supposed to keep Java updated automatically.
On my PC I have Java 8 64 bit Update 51 installed.
Using the Minecraft Windows installer launcher, Java version 8 64 bit update 25 is used instead.
This might be working as intended, but it still isn't the best solution.
Linked issues
relates to 1
Attachments
Comments 2
Reopening this, at least a fullscreen bug was fixed: MC-87102
This is intended.
There is no security hole or something like that, because that bundled Java version is only used for running the Minecraft Launcher and Minecraft itself.