Technical Information

Brief overview of the risk:
A security feature bypass vulnerability exists in Microsoft Office software by not enforcing macro settings on an Excel document.

Detailed Information on the risk:
The security feature bypass by itself does not allow arbitrary code execution. To successfully exploit the vulnerability, an attacker would have to embed a control in an Excel worksheet that specifies a macro should be run. To exploit the vulnerability, an attacker would have to convince a user to open a specially crafted file with an affected version of Microsoft Office software.

Further information on this exploit is available at : CVE-2017-11877