Microsoft is set to release an out-of-cycle security update to address a vulnerability that's being actively exploited by malware writers.