Serious IE and Windows flaws left to fester
Microsoft won't fix vulnerabilities in the latest versions of Internet Explorer or Windows during its regularly scheduled patch release on Tuesday, meaning users will have to wait at least another month to get updates that correct the security risks.
The software maker on Thursday said January's Patch Tuesday will include a single bulletin that fixes a vulnerability that carries a severity rating of "critical" in Windows 2000 and "low" in all other versions of the operating system. That's one of the slimmest ever offerings since Microsoft began the practice of releasing security fixes on the second Tuesday of every month.
