Microsoft is warning Word users of attackers exploiting a newly discovered - and "extremely critical" - vulnerability.