Threat Actors Allegedly Selling Microsoft Office 0-Day RCE Vulnerability on Hacking Forums

A Russian-language underground forum vendor identified as "Zeroplayer" is advertising a Microsoft Office zero-day RCE combined with a sandbox escape for $30,000, claiming compatibility with recent Office/Windows updates and the ability to achieve full system compromise via malicious documents; no public evidence of in-the-wild exploitation is provided. Organizations are advised to harden Office configurations (disable macros, enable Protected View), deploy advanced threat protections, monitor for forum activity and indicators, and apply any Microsoft fixes promptly.