Microsoft published nine bulletins plus one bulletin affecting Adobe Flash. These bulletins fix 43 vulnerabilities in Microsoft software, and  11 in Flash.

Several of the bulletins address vulnerabilities that are already exploited in the wild. Most of these vulnerabilities are information disclosure vulnerabilities. One of them, CVE-2016-3393 is a remote code execution vulnerability which is why I labeled it as "Patch Now".

For more details, see how summary here: 

https://isc.sans.edu/mspatchdays.html?viewday=2016-10-11

or our API for automatic processing of the data.

https://isc.sans.edu/api/getmspatchday/2016-10-11

---
Johannes B. Ullrich, Ph.D.
STI|Twitter|LinkedIn