An issue exists in the way Windows Search and Microsoft Office process input data, specifically related to HTML. A remote attacker can execute arbitrary code on a system by inducing a user to open a specially crafted malicious Microsoft Office document. This flaw allows for a Mark-of-the-Web (MotW) bypass, enabling the planting of files without the MotW security attribute using Windows Search.