Despite not being 0-day or even 1-day vulnerabilities, three well-known and outdated CVEs in Microsoft Word and Excel continue to pose a threat to the cybersecurity industry. In these three CVEs, researchers found several connections, including technical tricks to conceal the harmful nature of the malicious documents and lure topics designed to mislead users into opening the document.

Source: GBHackers