Microsoft published the October 2017 Patch Tuesday, the company’s monthly update train, addressing important security issues. This month, the updates include fixes for 62 security bugs in applications such as the Windows OS, various Office offerings, Skype for Business, Internet Explorer, Microsoft Edge, and the Chackra Core browser engine. Of all the bugs, the most important is a zero-day that was publicly disclosed and later used in attacks on live targets before Microsoft got around in releasing today’s fixes. The vulnerability (CVE-2017-11826) is a remote code execution bug that affects Office Word, discovered by three Qihoo 360 security researchers.
Source: https://www.bleepingcomputer.com/news/microsoft/microsoft-october-patch-tuesday-fixes-62-security-issues-including-a-zero-day/