Vulnerabilities
CVE-2026-72977: Microsoft Office PowerPoint Information Disclosure on macOS – Patch Required
Microsoft released a patch for a PowerPoint information‑disclosure flaw (CVE‑2026‑72977) that affects Office for macOS. The vulnerability could expose sensitive data to malicious files. Administrators should update all affected macOS installations immediately; other Office platforms are unaffected.
What happened
A flaw in Microsoft Office PowerPoint for macOS allows an attacker to extract confidential information from a malicious presentation file. The issue is identified as CVE‑2026‑72977.
Impact
Only Office for macOS installations are vulnerable. The flaw can reveal hidden metadata and other sensitive data embedded in PowerPoint files. No impact on Windows or Linux Office versions.
Mitigation
Apply the latest Office update for macOS as soon as possible. Verify that the installed Office version is at least the one released in the recent security bulletin. No action is required for non‑macOS Office users.