TWO NEW WINDOWS ZERO-DAYS EXPLOITED IN THE WILD - ONE AFFECTS EVERY VERSION EVER SHIPPED

Summary from the TLDR InfoSec newsletter

Microsoft fixed three actively exploited vulnerabilities as part of the final Patch Tuesday for Windows 10. One of the vulnerabilities is a secure boot bypass, whereas the other two are privilege escalation vulnerabilities. Notably, a vulnerable legacy modem driver could allow for privilege escalation in every version of Windows.