Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM.
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Summary + source link. No paywalls, no tracking.