Researcher Finds Third Zero-Day Excel Flaw