Part of this month’s Patch Tuesday is an update for a zero-day information disclosure vulnerability (CVE-2017-0022), which we privately reported to Microsoft in September 2016. This vulnerability was used in the AdGholas malvertising campaign and later integrated into the Neutrino exploit kit.
Post from: Trendlabs Security Intelligence Blog - by Trend Micro
CVE-2017-0022: Microsoft Patches a Vulnerability Exploited by AdGholas and Neutrino