office vulnerability