The “MDB Leaker” vulnerability could potentially affect more than 85,000 companies. It’s difficult to use as a code execution bug, experts say, but it could be leveraged to harvest information users are exposed. The vulnerability is strikingly similar to an older bug that could enable unintended leakage of data in previously created Office documents and files. Microsoft issued a patch for the vulnerability in December 2019, but there is no knowledge of this bug being exploited in the wild. An advisory issued for the bug ranked the vulnerability as Important.”]
Source: https://www.darkreading.com/application-security/the-discovery-and-implications-of-mdb-leaker-