Microsoft has issued advisory which describes a serious Remote Desktop (RDP) vulnerability. Attacks can occur with no passwords needed.
According to SANS:
Title: Microsoft patches 79 vulnerabilities, 22 critical
Description: Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 79 vulnerabilities, 22 of which are rated “critical,” 55 that are considered “important” and one “moderate.”
NOTE: Windows 7 is end of life in 7 months. Please update to Windows 10 now.