An undocumented Microsoft Office feature allows for spying via specially crafted Word documents—no macros, exploits or any other active content needed.
Source: Threatpost Attackers Use Undocumented MS Office Feature to Leak System Profile Data

iOS 11 Update includes Patches for Eight Vulnerabilities