Hackers are exploiting a zero-day flaw in the msvidctl.dll component of Microsoft DirectShow to infect computer users visiting compromised legitimate websites. The flaw means that if you visit an affected website, hackers could silently install code onto your computer by exploiting a vulnerability on your Windows computer. There is no official patch yet from Microsoft for the problem. As its versions of Internet Explorer that are affected, some users may feel more comfortable using non-Microsoft web browsers until a fix is available.”]
Source: https://grahamcluley.com/zeroday-vulnerability-microsoft-directshow/