Microsoft is scrambling to fix a security flaw in its Internet Explorer 6 to 11 browser versions that is already being used in “limited, targeted attacks.”