Vulnerabilities
CVE-2026-97001: Remote Code Execution in Microsoft Office Word for Mac – Update Required
Microsoft released security updates for Office for Mac to fix CVE-2026-97001, a remote code execution flaw in Word. Mac users must install the patch immediately; other Office platforms are unaffected. Defenders should verify installation and monitor for exploitation attempts.
What Happened
Microsoft Office for Mac contains a flaw that allows an attacker to execute arbitrary code via a specially crafted Word document. The vulnerability is identified as CVE-2026-97001.
Impact
Only Mac installations of Microsoft Office are vulnerable. The flaw permits remote code execution, potentially compromising the host system if an attacker delivers a malicious document.
What to Do
Mac users of Microsoft Office must apply the latest security update. No action is required for Windows, Linux, or other Office products.
- Verify that the Office for Mac version is 2026 or later.
- Download the patch from the Microsoft Update Catalog or use the built‑in update mechanism.
- Confirm the update by checking the Office version or running the Office update status command.
Monitoring and Response
Keep an eye on the Office for Mac update status and watch for any anomalous document opening activity. If an exploit attempt is detected, isolate the affected machine and apply the patch immediately.
Related vulnerabilities
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-78521 – Update Required
Microsoft has released patches for a remote code execution flaw (CVE-2026-78521) affecting Microsoft Office for Mac. The vulnerability can be triggered via malicious Word documents and allows arbitrary code execution. Office for Mac users must install the update immediately; other Office products are not impacted.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-78511
Microsoft released a patch for a remote code execution flaw in Office for Mac (CVE‑2026‑78511). Only Mac users of Office Word are affected; other platforms do not require action. Apply the update immediately to mitigate the risk.
Read briefing
Microsoft Office for Mac Remote Code Execution Vulnerability (CVE‑2026‑88150) – Update Required
A remote code execution flaw exists in Microsoft Office Word for macOS, identified as CVE‑2026‑88150. Affected users must install the latest Office for Mac patch to prevent exploitation. Other Office products are not impacted.
Read briefing