Microsoft Windows MSHTML RCE

This strike exploits a remote code execution vulnerability in Microsoft Windows MSHTML. The vulnerability is due to improper validation of Office documents. An attacker could entice the victim to open a crafted docx file which contains a malicious ActiveX control or an RTF file with an \objupdate control that references public resources and can be abused to execute malicious code from the Internet while the document is being loaded. Successful exploitation could lead to code execution on the victim's machine.