Microsoft has announced that an out-of-band (non-Patch Tuesday) patch is coming down the pipes to Windows users tomorrow (December 17). This patch fixes a serious vulnerability discovered in Internet Explorer.
We’ve just published our Advance Notification for an out-of-band security bulletin release. We plan to release the security update tomorrow, Dec. 17, 2008 to address the vulnerability we’ve discussed in Microsoft Security Advisory 961051. Our target time, as always, is 10:00 a.m. Pacific Time.
Security bulletin here.
Given the severity of this vulnerability you should roll out this update as soon as you can.