Microsoft: IE Zero Day Flaw Affects All Versions

Summary: Microsoft disclosed an unpatched, previously unknown remote code vulnerability (CVE-2013-3893) affecting all supported versions of Internet Explorer, with targeted attacks observed against IE 8 and IE 9. Microsoft released a temporary Fix It workaround while it develops an official patch, and the fix applies only to 32-bit versions of IE.
Bottom line: A remote code flaw in the default Windows browser means a user can be compromised simply by visiting a hacked or malicious site, and the interim fix leaves 64-bit IE users without the same protection until Microsoft ships a patch.

Read the original at Krebs on Security ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2013-3893
Related: CVE-2013-3893: Microsoft Internet Explorer Resource Management Errors Vulnerability Known Exploited Vulnerabilities · Aug 12, 2025
Microsoft Update Tuesday October 2013: Another IE 0-day release Cyber Risks ·
Adobe, Microsoft Push Critical Security Fixes Cyber Risks ·