Microsoft late Friday confirmed that a “zero-day,” or unpatched, vulnerability exists in Internet Explorer 8, the company’s most popular browser. …