Google Project Zero team disclosed a new unpatched flaw affecting Windows 8.1 systems. Microsoft will patch only one of the vulnerabilities reported by the Google team. Microsoft asked Google to extend the deadline because it was planning to fix the bug in February 2015, but Google refused in compliance with its 90-day disclosure policy. Microsoft plans on releasing a security update on January 13, when the company plans to release a new security update. Google advisory includes a proof-of-concept exploit that could be used to verify the flaw.”]
Source: https://securityaffairs.co/wordpress/32309/security/project-zero-third-windows-flaw.html