Researchers from the security company Vectra have discovered a high-severity vulnerability in Internet Explorer 11 which impacts browsers on Windows 7 and Windows 8.1.
Vectra explained that their investigation followed a successful attack on the Italian security company known as the Hacking Team.
In the aftermath of the attack, Vectra researchers analysed the leaked data and identified a previously unknown vulnerability in Internet Explorer 11.
The Internet Explorer vulnerability is an exploitable use-after-free (UAF) vulnerability that occurs within a custom heap in JSCRIPT9.
Since the vulnerability exists within a custom heap, it may allow an attacker to bypass memory protection technologies.
Microsoft published a fix for this vulnerability on 14 July, and released information about the fix.
Internet Explorer users are recommend to apply this Microsoft update as soon as possible.