The researchers at Googles Project Zero have revealed another flaw, tracked as CVE-2017-0037, that affects Microsoft Edge and IE browsers. The vulnerability resides in a module in Microsoft Edge that let attackers execute arbitrary code on the target machine when the victim visits a malicious website. The flaw affects all Windows 7, Windows 8.1, and Windows 10 users. Google publicly released the details of the vulnerability as Microsoft did not fix it within its 90-day disclosure deadline. On Tuesday Microsoft issued the security updates KB 4010250 that address flaws in Adobe Flash Player but two already disclosed flaws remain unpatched.”]
Source: https://securityaffairs.co/wordpress/56716/hacking/cve-2017-0037-microsoft-flaw.html