Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.
Apply updates per vendor instructions.