Marked more JDK expressions vulnerable and added USNs to the note.