While Microsoft told BleepingComputer in March that it would "consider addressing" this zero-day flaw, even though it "does not meet the bar for immediate servicing," it has yet to release security updates to patch this heavily exploited Windows vulnerability.

Sure, they have to triage threats to mitigate but you'd think active exploitation campaigns would bump up the priority a bit.