Microsoft no longer supports Internet Explorer and recommends that you update to the newerEdge online window.
Head to their site todownload the newest version.
What threat actors do is create a Microsoft Office document that houses a malicious ActiveX control.

Bill Hinton/Getty Images
ActiveX controls are small bits of software that allow websites to provide content on Internet Explorer.
Once a user opens the infected document, the malicious ActiveX control implants malware onto the targeted computer.
The MSRC currently is investigating the situation.
The vulnerability has yet to be patched, although Microsoft is most likely working on fixing this problem.
The companys antivirus tools, like Defender for Endpoint, also can detect the exploit and protect your box.
The MSRC recommends that users keep their antivirus and anti-malware software up to date.
Users who automatically update their protections have nothing to worry about.