The firm described the holes as "highly critical", meaning that systems could be compromised if crooks dive in.
Secunia said the potential holes are in version 10.4.6, but other versions might be affected too.
Until the holes are filled in, don't visit untrusted web sites, or open ZIP archives or images which come flying your way and that look a tad dodgy.
The notification can be found on this page. µ
Will revolutionise online shopping, apparently
A more affordable alternative to the Lumia 1520
Sign up for INQbot – a weekly roundup of the best from the INQ