Office and Windows HTML Remote Code Execution vulnerability (CVE-2023-36884)

CVE-2023-36884 is a critical zero-day RCE vulnerability affecting multiple Microsoft Office and some Windows versions that can be exploited by specially crafted Office documents; the report details affected versions, potential impacts (remote code execution, data theft, ransomware, persistence), Microsoft mitigation recommendations (Defender for Office 365, updates, and a FEATURE_BLOCK_CROSS_PROTOCOL_FILE_NAVIGATION registry mitigation) and ThreatLocker's Configuration Manager policy to deploy the recommended registry-based mitigation.