A vulnerability patched in 2012 was the most used exploit in December 2019. Chinese state cyber actors were frequently exploiting the same vulnerability. The vulnerability affects Office 2003, 2007 and 2010. Administrators must search for and remove older files to allow VBA to continue to work after installing the patch. If you still have Office 2010 deployed, review your installation base for skipped updates that leave you at risk. Use your favorite patching tool (SCCM, WSUS, etc.) and scan the network looking for missing Office updates.”]