Microsoft Office lets hackers execute arbitrary code, update now

Cybersecurity researchers from Cisco Talos recently discovered a high-severity vulnerability in Microsoft Office that would allow potential threat actors to remotely execute malicious code on the target endpoint. 

Announcing the news in a short blog post published earlier this week, the office software developer said its researcher Marcin ‘Icewall’ Noga uncovered a class attribute double-free vulnerability affecting Microsoft Excel.

Source