Microsoft Admits Finding Zero-Day Bug in IE8

Microsoft confirmed on Friday that a zero-day vulnerability was found in IE8 allowing exploits to target workers in so-called ‘watering hole’ attacks. Microsoft is working on a fix to the problem, but so far has not confirmed a date.

On Friday, Microsoft published a security advisory that acknowledged the bug. In the advisory, the company also said that other versions of Internet Explorer, including the newer IE9 and IE10, are not affected, and that the firm is working on an update to patch the problem.

Comments