Bleeping Computer: Zero-day vulnerability found in Microsoft Office

May 31 - Ryazan.life. Microsoft Office exploit spotted in real attacks 

As it became known from the material of the Gazeta.ru publication , a zero-day vulnerability was discovered in the Microsoft Office software package. This was announced by an independent expert Nao_sec, to whose words the publication refers. 

Information about the vulnerability appeared in the electronic journal Bleeping Computer. It turned out that the program module responsible for processing the HTML code does not work correctly. If a hacker creates a certain malicious file, it becomes possible to take control of the device. The problem was discovered thanks to an infected file that was uploaded to the VirusTotal website. Experts rate the criticality of the threat at 7.8 points out of 10.