Windows MSHTML zero-day used in malware attacks for over a year

https://www.bleepingcomputer.com/news/security/windows-mshtml-zero-day-used-in-malware-attacks-for-over-a-year/