Microsoft has released a bulletin warning of a bug in pretty much all versions of IE (6-11) which could allow remote code to be executed with the privileges of the running user.
Call me jaded but if you are still using IE, there is no hope for you. Sure – Microsoft has tried (and failed) to fix their product. The best thing they could do is concede defeat and bring us a rebranded OSS browser, perhaps based on WebKit. Huh? They are doing that?? It could just be my imagination.