Microsoft's out-of-band patches for vulnerabilities in Internet Explorer and Visual Studio have been welcomed.