Researchers warned last weekend that a flaw in Microsoft's Support Diagnostic Tool could be exploited using malicious Word documents to remotely take control of target devices. Microsoft released guidance on Monday, including temporary defense measures. ...
https://www.wired.com/story/microsoft-follina-vulnerability-windows-office-365/
from WIRED