ms13-028

MS13-028 is a critical security update for Internet Explorer that addresses two privately reported vulnerabilities. These vulnerabilities could allow remote code execution if a user views a specially crafted webpage. An attacker who successfully exploits these vulnerabilities could gain the same user rights as the current user, with users having fewer rights being less impacted. The update is part of Microsoft's April 2013 Patch Tuesday release and is rated Critical for all supported versions of Internet Explorer. Users are advised to apply the update promptly to mitigate the risk of remote code execution attacks.