Microsoft patches critical Windows zero-day bug that hackers are now exploiting

10.04.2012

Not this month.

"MS12-027 trumps the IE update this month," said Miller.

Storms also remarked on the downgrading of the IE bulletin. "When has there been a month when IE hasn't been the one to patch first?" Storms asked. "I can't remember one."

Two of the five vulnerabilities in MS12-023 were rated critical for IE9, the newest edition of Microsoft's browser that runs on Windows Vista and Windows 7.

today applied to Windows, .NET, Microsoft's VPN (virtual private networking) tool and Office 2007 and the ancient -- and no longer sold -- Microsoft Works.