Microsoft Corp. issues three bundles of updates fixing at least 11 security vulnerabilities in its software. Only one of today’s patches earned a critical rating, Microsofts most serious. But experts are warning that this critical Office vulnerability is likely to be used in targeted e-mail attacks against Microsoft Outlook users. The company did not issue an update to fix a zero-day flaw in Internet Explorer Web browser that is now being exploited by at least one common, automated hacker toolkit.”]
Source: https://krebsonsecurity.com/2010/11/microsoft-plugs-office-holes-but-no-ie-fix-yet/