Microsoft Windows TrueType Font parsing zero-day vulnerability used in limited attacks

A zero-day vulnerability affecting Microsoft Windows TrueType Font (TFF) parsing is reportedly being used to gain remote access into an international organization.