Microsoft to release eight security bulletins (three rated ‘Critical’ and five rated ‘Important’ Security holes in Internet Explorer and Windows could be exploited by hackers without the victims knowledge. The patches wont contain a fix for the zero-day vulnerability in the way Microsoft software handles TIFF image files. Microsoft is working on a fix and will release it when ready on November 12th. The security hole has been exploited in targeted attacks involving boobytrapped Word documents and broader financially-motivated campaigns.”]
Source: https://grahamcluley.com/patch-tuesday-tiff-zero-day-vulnerability/