Stopgap IE Fix, Safari Update Available
Summary: Microsoft released a stopgap "fix-it" tool to disable a critical vulnerability in Internet Explorer 6 and 7 after warning that criminal hackers were using the flaw in limited attacks, and a researcher published working exploit code based on a snippet he said he found referenced on a McAfee blog post. Apple also shipped a new Safari version with security patches for Mac and Windows, while Microsoft continued work on an official IE update.
Key Takeaway: Exploit code for the IE 6 and 7 flaw was circulating publicly before an official patch existed, leaving users dependent on a manual fix-it tool and a DEP-enabling workaround in the interim.
Read the original at Krebs on Security ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026