Microsoft just fixed two critical Office vulnerabilities that can be triggered simply by previewing a file in Outlook. No double-clicking or macros required.