Microsoft has released an update for Microsoft Office that turns off the Encapsulated PostScript (EPS) Filter in Office by default, as a defense-in-depth measure. We are aware of limited targeted attacks that could leverage an unpatched vulnerability in the EPS filter, and we are taking this action to help reduce customer risk until the security update is released.
We strongly recommend against turning on the EPS filter at this time. However, customers who need to turn on the EPS filter can reference KB Article 2479871:
-
2479871 Security settings for graphic filters for Microsoft Office 365, Microsoft Office 2016, Microsoft Office 2013, Microsoft Office 2010, and the 2007 Microsoft Office system
Note To apply this security update, you must have the release version of Office 2016 installed on the computer.