Until the CVE-2023-36884 patches are available, Microsoft says that customers using Defender for Office and those who have enabled the Attack Surface Reduction (ASR) rule "Block all  Office applications from creating processes child processes" (Block all Office applications from creating child processes ) are protected against phishing attacks that attempt to exploit the bug. Those who do not use these protections can add the following application names to the registry key: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BLOCK_CROSS_PROTOCOL_FILE_NAVIGATION as type values REG_DWORD​​with 1: excel.exe Graph.exe MSAccess.exe MSPub.exe PowerPoint.exe Visio.exe WinProj.exe winword.exe wordpad.exe However, it is important to note that setting this registry key to block exploit attempts may also affect some Microsoft Office features linked to the applications listed above.