Microsoft grapples with Internet Explorer security flaw