Security News > 2021 > September > Microsoft warns of attacks targeting Office documents

Affecting Windows desktops and servers, the attacks exploit an MSHTML vulnerability by using specially crafted Microsoft Office documents.

Microsoft has raised alarm bells over a new cyberattack that's actively targeting Windows users by exploiting a security flaw through malicious Office documents.

In a security update released on Tuesday, the software giant described its investigation into a remote code execution vulnerability in MSHTML that works through specially crafted Microsoft Office documents.

In the meantime, Microsoft Defender Antivirus and Microsoft Defender for Endpoint both detect and protect against this vulnerability.

Further, Microsoft Office by default opens documents from the internet in Protected View or Application Guard for Office, both of which prevent the current attack.

Office users should make sure that Protected View is enabled.

News URL

https://www.techrepublic.com/article/microsoft-warns-of-attacks-targeting-office-documents/#ftag=RSS56d97e7