Multiple Microsoft Office Products suffer from an inappropriate default configuration that allows auto-execution of Macros. Standard users can download macro-enabled Access, Excel, PowerPoint, Word documents and bypass built-in protections without user consent, when these documents are located in specific trusted directories/locations on the host machine. It's recommended to disable 'Trusted Locations' in future Office editions. This is because users often do not use the default trusted locations, potentially leaving average users vulnerable to such attacks when there is no need.

Microsoft monthly patches have been released. The August security release consists of security updates for the following software: Microsoft Windows, Internet Explorer, Microsoft Edge, ChakraCore, Microsoft Office, Microsoft Office Services and Web Apps, Visual Studio, Online Services, Active Directory and Microsoft Dyanmics. There are 94 vulnerabilities, 29 of them rated critical. 2 critical wormable Remote Desktop Service (not RDP) vulnerabilities have been patched.Users are advised to update as soon as possible.