Code execution through undisclosed Word flaw

Remote code execution in Microsoft Word for affected Microsoft Office products allows local attackers to run code after user interaction. Microsoft has not published the vulnerable Word component, the unsafe operation it performs, or the content format that reaches the flaw. Successful exploitation requires a local attack path and user interaction and executes code with the victim application's privileges.