Though the vulnerability was first identified in May, it's taken more than two months for Microsoft to issue an effective fix.