Microsoft patched a critical bug in Office — CVE-2025-62199 — that can lead to remote code execution on a Windows system.