Vulnerabilities
CVE-2026-80086: Microsoft Office PowerPoint Information Disclosure on macOS – Update Required
Microsoft released patches for the CVE-2026-80086 PowerPoint information‑disclosure flaw affecting Office for Mac. Administrators should verify that macOS installations are updated; other Office platforms are unaffected. Apply the update immediately to eliminate the risk.
What happened
A flaw in Microsoft Office PowerPoint allows an attacker to read sensitive data from memory when a malicious presentation is opened on macOS. The vulnerability is identified as CVE-2026-80086.
Impact
Only Microsoft Office for Mac is affected. Other Office products (Windows, iOS, Android) are not vulnerable. The flaw can expose confidential information but does not provide code execution.
What to do
Administrators should:
- Confirm that Office for Mac is running the latest version (see Microsoft’s release notes).
- Deploy the update across all macOS workstations immediately.
- Verify that the update has been applied by checking the Office version number.
Microsoft advises that no action is required for non‑Mac Office installations.
Related vulnerabilities
CVE-2026-72977: Microsoft Office PowerPoint Information Disclosure on macOS – Patch Required
Microsoft released a patch for a PowerPoint information‑disclosure flaw (CVE‑2026‑72977) that affects Office for macOS. The vulnerability could expose sensitive data to malicious files. Administrators should update all affected macOS installations immediately; other Office platforms are unaffected.
Read briefing
Microsoft Excel Information Disclosure Vulnerability (CVE‑2026‑81391) – Office for Mac Update Required
Microsoft released a patch for CVE‑2026‑81391, an information‑disclosure flaw in Excel on macOS. Only Office for Mac users are affected; other Office editions do not need action. Install the update immediately to eliminate the risk.
Read briefing
CVE‑2026‑108455: PowerPoint Information Disclosure – Update Omission Clarified
Microsoft Office PowerPoint’s information disclosure vulnerability (CVE‑2026‑108455) was fixed in the October 2026 security update, but the CVE was omitted from the advisory list. Defenders should verify the update is installed; no further action is required if already updated.
Read briefing
CVE-2026-69767: PowerPoint for Mac Remote Code Execution – Immediate Update Required
Microsoft released a patch for a remote code execution vulnerability in PowerPoint for macOS (CVE-2026-69767). Only macOS users are affected; Windows and other Office apps remain safe. Install the update immediately to prevent exploitation.
Read briefing