Windows MSHTML zero-day used in malware attacks for over a year
Windows MSHTML zero-day used in malware attacks for over a year
www.bleepingcomputer.com
Windows MSHTML zero-day used in malware attacks for over a year

Microsoft fixed a Windows zero-day vulnerability that has been actively exploited in attacks for eighteen months to launch malicious scripts while bypassing built-in security features. [...]