Microsoft announced on Sunday that it will release an out-of-cycle patch to fix a vulnerability in Windows animated cursor handling (ANI) that some security experts are calling one of the most significant flaws in years.