The bug allows attackers to execute a code on an affected system just by convincing users to visit a URL in Internet Explorer. According to The Verge, the exploit can be triggered on Internet Explorer 3.0 onwards, IBM said.
All versions of Windows Operating Software including Windows 8.1, Windows 7, Windows Vista, and its various server releases, will receive patches except Windows XP which the company stopped supporting earlier this year.
Although the bug has not been exploited in the wild but it has been rated 9.3 out of 10 on the Common Vulnerability Scoring System (CVSS).