A remote code execution vulnerability exists in Microsoft Word if a user opens a specially crafted PDF file, aka "Word PDF Remote Code Execution Vulnerability." This affects Microsoft Word, Microsoft Office.
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8430