Attackers are actively exploiting a Windows zero-day vulnerability that can execute malicious code on fully updated systems, Microsoft ... code execution within an AppContainer sandbox context ...

Because the vulnerability affects the JScript component (Microsoft custom implementation of JavaScript), the only ... "The flaw only allows code execution within a sandboxed environment," Gorenc ...

A critical code execution zero-day ... or create new accounts in the context allowed by the user's rights." At the time of this story's publication, Microsoft had yet to issue a patch.

A security researcher has published today proof-of-concept code which an attacker can use to run malicious code on a remote computer via the Microsoft ... is only HTML and JavaScript, meaning ...