Does not need to be patched. The bug can only be leveraged by hostile code running in your machine. That means that they have already gotten in and can do all kinds of damage without leveraging the bug.
There is a theoretical possibility of it being used via javascript. Turn off javascript in the browser, problem solved. Update the browser, problem solved