Research shows a .NET proxy design flaw enables file writes and RCE through attacker-supplied WSDL in multiple products.
KB5072033 addresses vulnerabilities across Windows systems and Office applications—including one actively exploited zero-day.