Microsoft has warned of a previously unknown vulnerability that exists in all supported versions of Internet Explorer and allows attackers to secretly compromise vulnerable computers.
The zero-day vulnerability in IE versions 6 through 11 represents a significant threat to online security because there is currently no patch available. It is also the first significant vulnerability to target Windows XP users since Microsoft withdrew support for it.
Users who have the option to use an alternative browser should avoid using IE for now. Those who still only use Microsoft should immediately install EMET, Microsoft's free tool that significantly extends the security of Windows systems.
The vulnerability has been officially identified as CVE-2014 – 1,776.
