Microsoft on Wednesday issued a stopgap defense that protects Internet Explorer 9 and IE10 against ongoing attacks until the company issues a patch, probably in three weeks.