Vectra Networks reported the vulnerability to Microsoft on July 9. Vectra said the flaw occurs within a custom heap in JSCRIPT9, meaning it may allow an attacker to bypass protections found in standard memory.

Read the article