Windows 10 Drive-By RCE Triggered by Default URI Handler

The issue lies in the Windows 10 default URI handler for ms-officecmd: URIs are used by the Microsoft Office Universal Windows Platform (UWP) app to launch other Office desktop applications.