The flaw was first spotted by security research firm FireEye, which claims that it is being actively exploited in “targeted attacks.” According to Microsoft’s security advisory, the flaw affects everything from Internet Explorer 6 up to the most recent version of Internet Explorer 11, though FireEye says the attack is targeting IE 9 through 11.