Microsoft Word 2013 SP1, 2013 RT SP1, 2016, and 2016 for Mac allow remote attackers to execute arbitrary code via a crafted file, aka "Microsoft Office Memory Corruption Vulnerability."
https://www.exploit-db.com/exploits/40238/
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-099