Softpedia reports that in all versions of Windows, they found a zero-day vulnerability. This time, the “distribution” got the MHTML file handler in IE. An attacker could embed a malicious script into the archive of a page that will be launched when trying to view a file. The result - the collection of user information, the substitution of a web page, etc. The patch has not yet been released, MS suggests simply refusing to open these files.