Microsoft has recently announced that this month’s Patch Tuesday rollout would bring a total of five security bulletins developed to fix flaws in Windows, Internet Explorer, and Silverlight.
Two of the bulletins are rated as “critical,” Microsoft explained, while the other three are said to be “important.”
MS14-012, the company added, will be updated to address an Internet Explorer flaw discovered in February and unpatched until now, which means that users would be strongly recommended to deploy the fixes on Tuesday as soon as they become available.
Microsoft has confirmed that it’s indeed aware of attacks supposed to exploit this vulnerability, but only limited attempts have been registered till now. The company has already released a Fix it solution for this flaw, but this is the first full-time patch addressing it.
“The update provided in MS14-012 fully addresses the issue first described in Security Advisory 2934088. While we have seen a limited number of attacks using this issue, they have only targeted Internet Explorer 10. Customers using other versions of Internet Explorer have not been impacted,” Microsoft pointed out.
The zero-day vulnerability discovered in mid-February was said to be used for a number of attacks across the world, including for attempts aimed at members of the US military.
More at Softpedia