In the meantime, install the shim that they’ve released. “Since attacks are occurring now, this is a situation where it’s in everyone’s best interest for Microsoft to release a patch as soon as possible. “It’s important to reiterate that ALL versions of IE are affected including the Internet Explorer 11 preview, Tyler Reguly, technical manager of security research and development for Tripwire, says. It’s been a while since we’ve seen an out-of-band patch for IE from Microsoft, but it’s still important to apply it as soon as possible.” “The average user does not run the restricted sites mode, are not using the Enhanced Security Configuration and are all-too-willing to click on phishing emails,” Henry explains, “I recommend employing the mitigating factors, as well as advising users about this so they will be less likely to click malicious links until you can apply the patch. The same IE11 apps and sites you use today can open in Microsoft Edge with Internet Explorer mode. For a list of what’s in scope, see the FAQ.

If a user receives an email with a link and clicks on it, they’re still potentially vulnerable because the threat is now Web-based and functioning outside of Outlook. The Internet Explorer 11 desktop application will be retired and go out of support on June 15, 2022. However, Microsoft cautions that the protection in Outlook only applies to the HTML message within Outlook itself.

Microsoft fixit for ie 11