Threat Post - Attackers Actively Target Windows Installer Zero-Day

Researcher discovered a “more powerful” variant of an elevation-of-privilege flaw for which Microsoft released a botched patch earlier this month.

from Threatpost https://threatpost.com/attackers-target-windows-installer-bug/176558/