Microsoft Fixes Three Zero Days

Flaws Addressed In WordPad, Skype for Business, and HTTPS/2 Protocol
Microsoft fixed three zero-days under actively exploitation in its patch dump for the month of October: A disclosure flaw in WordPad that can be exploited to obtain hashed passwords, a bug in Skype for Business and a patch to fix exposure to the Rapid Reset exploit.

bug business disclosure exploit exploitation exploited exposure fix fixes flaw flaws for business https microsoft october passwords patch rapid rapid reset reset skype skype for business under wordpad zero-days