CVE-2023-33148

The exploit leverages a VBA macro in a malicious Word file to execute arbitrary commands via `cmd.exe` when opened in Microsoft Office 365. It downloads and executes a remote batch file, demonstrating RCE and privilege escalation.