Microsoft discloses unpatched Office flaw that exposes NTLM hashes

How is this even possible? Why does Office have access to NTLM hashes?