Unpatched Microsoft Word DDE Exploit Being Used In Widespread Malware Attacks

According to the security researcher, it describes that hackers could leveraging an old Microsoft Office feature called Dynamic Data Exchange to perform malicious code execution on the targeted device without requiring Macros enable or memory corruption. Dynamic Data Exchange is one of the several methods that Microsoft uses to allow two running applications to share the same data which including MS Excel, MS Word, Quattro Pro and other applications. The Dynamic Data Exchange technique displays no “security” warnings to victims and victims can lose their personal information due to lack of security.

https://thehackernews.com/2017/10/ms-office-dde-malware-exploit.html