Researchers have reported a third zero-day exploit targeting a flaw in Microsoft Word.