Microsoft releases emergency security patch for Internet Explorer

Microsoft has been forced to issue an emergency security patch for its Internet Explorer browser.

The release came after Google security engineer Clement Lecigne uncovered a critical vulnerability in several versions of Microsoft's browser, and could have been activated simply by directing users to a malicious website

The flaw, known as CVE-2018-8653, affects Internet Explorer 9, 10 and 11, with the update issued to Windows 7, 8.1 and 10 versions, as well as Windows Server 2008, 2012, 2016 and 2019.

Internet Explorer security

"A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer," Microsoft stated in its support document for the threat. "The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user."

The company has issued a fix for the flaw now, outside of its typical Patch Tuesday security cycle, signifying it is a significant threat and should be patched immediately.

Microsoft has gradually retired Internet Explorer from public view over the past few years as it focuses on its newer browser Edge, with only customised versions available to certain business users.

The company may also be about to pull the plug on Edge as well, with report recently confirming Microsoft is set to introduce a new browser built on Google's Chromium platform.

Mike Moore
Deputy Editor, TechRadar Pro

Mike Moore is Deputy Editor at TechRadar Pro. He has worked as a B2B and B2C tech journalist for nearly a decade, including at one of the UK's leading national newspapers and fellow Future title ITProPortal, and when he's not keeping track of all the latest enterprise and workplace trends, can most likely be found watching, following or taking part in some kind of sport.

Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
DeepSeek
Deepseek’s new AI is smarter, faster, cheaper, and a real rival to OpenAI's models
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring