Microsoft has officially confirmed attacks targeting a Critical 0-day vulnerability affecting various releases of Office Excel. According to the Redmond company the vulnerability is actively being exploited in the wild, and a patch is in the works, although no security update is available as of yet to resolve the flaw. The Microsoft Excel Invalid Object vulnerability is rated as Critical because it can allow an attacker to perform Remote Code Execution on an affected system in the eventuality of a successful attack. Attacks against the security flaw generated by a Boundary Condition Error have initially been reported by security company Symantec.

more: Softpedia