It's known that MS Excel functionality of external references will allow executing arbitrary commands from its formulas with appropriate security warnings and confirmation required from the user.
E.g. having a cell in excel sheet (or csv file opened by excel) that contains the formula
=cmd|' /C calc'!A1 will run calc.exe in a manner that can be extended to run arbitrary code.
However, this rises two questions:
Are the details of this functionality documented anywhere? MS Office documentation of external references doesn't do so.
Is there an equivalent construction in Excel for Mac? The particular example doesn't work, but it could as well be because of cmd (and calc) being windows-specific command names; if the external execution is intentional (as those old vulnerabilities haven't been removed but just had the warnings added) it should likely be implemented in Excel for Mac as well.