Microsoft’s first foray into patching Internet Explorer in 2015 is still short one zero day fix.
Today’s Patch Tuesday security bulletins included a monster IE rollup taking care of 41 vulnerabilities in the browser, and another bulletin patching a Windows zero day publicly disclosed by Google’s Project Zero research team. Missing, however, is a patch for another publicly disclosed cross-site scripting vulnerability in the browser disclosed Jan. 31 by researcher David Leo of Deusen, a U.K. consultancy.