A patch is about to roll out, but the exploit affects more than 40 percent of the internet.