Microsoft patches actively exploited Office zero-day vulnerability

High-severity Microsoft Office zero-day vulnerability that is a security feature bypass flaw. The vulnerability bypasses OLE mitigations in Microsoft 365 and Microsoft Office which protect users from vulnerable COM/OLE controls. It involves reliance on untrusted inputs in a security decision in Microsoft Office, allowing unauthorized attackers to bypass a security feature locally. The preview pane is not an attack vector, but unauthenticated local attackers can exploit the vulnerability through low-complexity attacks that require user interaction. Attackers must send a user a malicious Office file and convince them to open it.