Update: proof of concept on GitHub published. Microsoft Office is affected by this vulnerability, which could allow a local attacker to get around a built-in security feature. Successful exploitation would let the attacker bypass protections that Office relies on to make trust decisions, because it depends on input that cannot be trusted.