As it turns out, attackers love exploiting Microsoft Office vulnerabilities. The flaws we listed above are definitely severe but they are just a small portion of the arsenal used by threat actors. Patching the operating system as soon as a security fix arrives is highly important but sometimes it may not be enough as evident by the plenty of zero-day exploits (targeting not only Microsoft products but also a range of other software). As many of the exploit campaigns are spread via email and require the user interaction of opening a malicious email/file/link, adopting phishing security awareness becomes a top priority for both enterprise and home users.