Microsoft will ship two critical and two important rated security bulletins in its last patch Tuesday release providing support for the windows XP operating system. The critically rated bulletins will address remote code execution vulnerabilities in Microsoft Office, Office Services, and Office Web Apps as well as bugs in Windows and Internet explorer. The first bulletin will resolve a Microsoft Word zero day after it spotted targeted attacks exploiting the zero day in the wild late last month. The second bulletin is a cumulative update for Internet Explorer, which is also critically rated and of high priority.
Source: https://threatpost.com/microsoft-to-fix-word-zero-day-with-final-xp-patch/105241/