This attack only works if the user clicks 'enable macros' when the document is opened or when the "“Disable all macros without notification" setting is enabled (ironic) or if you are using Office 2011.
TL;DR: Looks like most of the exploits have been patched, and even still, if they hadn't been patched you probably would have been fine using later versions of office (at least in the context of the attacks outlined) if you don't open and run documents with macros and you don't have that setting enabled.
Re:Office Drama on macOS
by tinus_hn on Thursday August 13, 2020 @05:52AM
(#24141604)
No it features a different exploit involving an ancient programming language in an ancient file format that they forgot when they added the notifications.
TL;DR: Looks like most of the exploits have been patched, and even still, if they hadn't been patched you probably would have been fine using later versions of office (at least in the context of the attacks outlined) if you don't open and run documents with macros and you don't have that setting enabled.