Advisories
CVE-2026-78512: Microsoft Office for Mac Remote Code Execution Vulnerability Fixed
Microsoft released patches for Office for Mac that address CVE‑2026‑78512, a remote code execution flaw in Word. Mac users must apply the update immediately; other Office products are unaffected.
What happened
Microsoft identified a remote code execution vulnerability (CVE‑2026‑78512) in Word on macOS. An attacker could trigger the flaw by delivering a crafted document to a vulnerable user.
Impact
Only Microsoft Office for Mac installations are affected. Other Office products (Windows, iOS, Android) do not require action.
Mitigation
- Install the latest Office for Mac update from the Microsoft Update catalog or the Office installer.
- Verify that the installed version is at least the one listed in the release notes.
Additional Resources
See the Microsoft Security Update Guide for full details and download links: https://go.microsoft.com/fwlink/p/?linkid=831049