Vulnerabilities
CVE-2026-69797: Remote Code Execution in Microsoft Office PowerPoint for Mac – Immediate Update Required
Microsoft has released security updates for Office for Mac to address a remote code execution flaw in PowerPoint. Mac users must install the patch; other Office products are unaffected. Defenders should confirm patch status and monitor for exploitation attempts.
What happened
A vulnerability (CVE‑2026‑69797) in Microsoft Office PowerPoint on macOS allows an attacker to execute arbitrary code by opening a crafted presentation. The flaw is triggered when the application processes the file, enabling remote code execution without user interaction.
Impact
Only Microsoft Office for Mac installations are affected. Users of Windows, Linux, or other Office suites are not at risk. The vulnerability could be leveraged to run malware, steal data, or gain system control.
What to do
- Verify that Office for Mac is updated to the latest version (see Microsoft’s release notes for the specific build).
- Force a patch deployment across all Mac endpoints, prioritizing machines with PowerPoint installed.
- Enable automatic updates for Office to prevent future exposure.
- Monitor logs for anomalous PowerPoint activity and block suspicious files from the network perimeter.
Microsoft recommends installing the update immediately to mitigate the risk of exploitation.
Related vulnerabilities
CVE-2026-97773: Office for Mac RCE – Update Required
Microsoft released a patch for CVE‑2026‑97773, a remote code execution flaw in Office for Mac. Mac users of Excel must install the update immediately; other Office products are unaffected.
Read briefing
CVE-2026-69767: PowerPoint for Mac Remote Code Execution – Immediate Update Required
Microsoft released a patch for a remote code execution vulnerability in PowerPoint for macOS (CVE-2026-69767). Only macOS users are affected; Windows and other Office apps remain safe. Install the update immediately to prevent exploitation.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-88202 – Immediate Update Required
Microsoft released a patch for Office for Mac to fix CVE‑2026‑88202, a remote code execution flaw. Users running the affected Mac version must update immediately; other Office products are not affected.
Read briefing