Threat Brief: Office Documents Can Be Dangerous (But We’ll Continue to Use Them Anyway)
Unit 42 describes five ways Office documents can be weaponized against Windows endpoints: VBA macros that run on open or after a click, embedded Flash objects exploiting flaws like CVE-2018-4878, Microsoft Equation Editor exploits including CVE-2017-11882...