Microsoft Patches Out-of-Band Internet Explorer Scripting Engine Vulnerability After Exploitation Detected in the Wild
Summary: Microsoft issued an out-of-band patch for an Internet Explorer scripting engine vulnerability after exploitation was detected in the wild, per a Cisco Talos post by William Largent dated December 19, 2018. The post itself carries only the headline and byline, with no further technical detail on the flaw or the attacks.
What you should know: An out-of-band fix means Microsoft judged the flaw urgent enough to ship outside its normal update cycle, and the trigger was real exploitation rather than a proof of concept - so any IE-dependent system in your estate was exposed before the patch landed.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026