November's Security Releases Will Not Include Fix for Zero-Day Vulnerability

Microsoft has released advanced notification for the November 2013 security updates that are scheduled to be released on November 12, 2013. Unfortunately, the recently reported zero-day flaw affecting multiple products will not see a fix included in next Tuesday's bundle.

Dustin Childs has taken to the Microsoft blog to describe why and give clarification on the issue. In the post HERE he explains that the fix for Security Advisory 2896666 could come at any time, which means it could release even before next Tuesday. Dustin suggests it will release when it's ready. However, the current Fix It solution is still the proposed deterrent at this point.

He goes on to clarify the specific products affected by the actively targeted vulnerability.

He also states that the only active attack identified was against Office 2007 running on Windows XP.