Microsoft Warns of Internet Explorer 0day
Summary: Microsoft issued two security patches to fix holes in Windows and Office, and warned that hackers are exploiting an unpatched flaw in Internet Explorer 6 and 7 to install malicious software. One update addresses Windows Movie Maker on XP and Vista, and the other fixes at least seven vulnerabilities in Microsoft Excel present in all supported Office versions, including Mac Office 2004 and 2008.
Why it matters: The IE flaw is so far only seen in targeted attacks, but the article notes such pinprick attacks on unpatched IE vulnerabilities often precede wider exploitation by the criminal hacking community.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026