Back 
Summary
Microsoft disclosed a zero-day vulnerability impacting Office and Windows on July’s Patch Tuesday. This vulnerability has an “important” severity level, and can allow attackers to perform remote code execution with the same privileges as the target. As of this writing, there is no patch available to mitigate the vulnerability, but Microsoft has provided mitigation steps. An attacker referred to by Microsoft as “Storm-0978” was observed exploiting the vulnerability by enticing victims to open malicious Office documents in email attachments.
CVE-2023-36884
Microsoft identified a phishing campaign that includes a remote code execution vulnerability exploit from a malicious Word document. The phishing campaign uses Ukrainian World Congress and NATO themes to trick targets into opening the document. Although a full list of affected Microsoft Office versions were not yet disclosed, their FAQ shows that Office365 Semi-Annual Channel Extended (specifically versions 2208 and 2202) and Microsoft 365 Apps Semi-Annual Channel Extended (specifically versions 2208 and 2202) are impacted by this vulnerability.
The