I stopped wrestling with Word styles and switched to Typst for cleaner document formatting.
Now the generator is able to generate the document required to exploit also the "Follina" attack (leveraging ms-msdt). Although many PoC are already around the internet, I guessed to give myself a run ...
EMBED <iframe src="https://archive.org/embed/office-word-2007-en" width="560" height="384" frameborder="0" webkitallowfullscreen="true" mozallowfullscreen="true ...