This is an excellent review of this month’s Patch Tuesday release by Microsoft including a patch for a JScript and VBScript scripting engine vulnerability that is being publicly exploited.
https://threatpost.com/microsoft-patches-jscript-vbscript-flaw-under-attack/117993/