Microsoft has released security updates to fix seven zero-day vulnerabilities, five of which are under active exploitation.