Advisories
CVE-2026-81956: Remote Code Execution in Microsoft Excel for Mac – Immediate Update Required
Microsoft released patches for CVE-2026-81956, a remote code execution flaw in Excel on macOS. Only Mac Office users are affected; other platforms remain safe. Apply the update promptly to mitigate the risk.
What Happened
Microsoft identified a remote code execution vulnerability in Excel for macOS, assigned CVE-2026-81956. The flaw allows an attacker to execute arbitrary code via a crafted spreadsheet.
Impact
Mac users running affected Office versions are at risk. Windows, Linux, and other Office deployments are not vulnerable. The vulnerability can lead to full system compromise if exploited.
Mitigation Steps
- Verify Office version on macOS.
- Download and install the latest Office update from Microsoft’s release notes.
- Verify the update by checking the build number or via the Office update mechanism.
- Consider disabling automatic macro execution and enforce strict file validation for incoming spreadsheets.
Additional Guidance
Microsoft recommends that administrators enforce the update through corporate deployment tools and monitor for any anomalous activity post‑patch.
Related vulnerabilities
Microsoft Excel for Mac RCE Vulnerability CVE-2026-81950 – Update Required
Microsoft released a security update for Office for Mac to fix a remote code execution flaw (CVE‑2026‑81950). The vulnerability affects all current Mac versions of Excel and can be triggered by malicious spreadsheets. Defenders should ensure Office for Mac is patched; other Office products are unaffected.
Read briefing
CVE-2026-97773: Office for Mac RCE – Update Required
Microsoft released a patch for CVE‑2026‑97773, a remote code execution flaw in Office for Mac. Mac users of Excel must install the update immediately; other Office products are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-97750 – Immediate Update Required
Microsoft released a patch for a remote code execution flaw in Excel on macOS (CVE‑2026‑97750). The issue affects only Office for Mac; other Office products are unaffected. Install the update immediately to eliminate the risk.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE‑2026‑97780 – Update Required
A remote code execution flaw (CVE‑2026‑97780) affects Microsoft Office for Mac. Users of the Mac version must install the latest security update; other Office products are unaffected. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing