Vulnerabilities
CVE‑2026‑97755: Remote Code Execution in Microsoft Excel on macOS – Update Required
Microsoft has released a patch for CVE‑2026‑97755, a remote code execution flaw in Excel on macOS. Mac users of Office must install the update immediately; other Office editions are unaffected. Failure to patch exposes systems to arbitrary code execution via malicious spreadsheets.
What happened
Microsoft identified a remote code execution vulnerability (CVE‑2026‑97755) in Excel for macOS. An attacker could trigger the flaw by opening a crafted spreadsheet, allowing arbitrary code to run with the user’s privileges.
Impact
Only macOS installations of Microsoft Office are affected. Users of Windows, Linux, or Office for the web are not exposed to this flaw.
Mitigation
Mac users should download and install the latest Office update immediately. The patch is available through the standard update mechanism or via the Microsoft website. No action is required for other platforms.
- Verify Office version: macOS 16.0 or later.
- Run 'Microsoft AutoUpdate' and apply the latest Office bundle.
- Restart the machine after installation.
Microsoft advises all macOS Office users to apply the update to eliminate the remote code execution risk.
Related vulnerabilities
Microsoft Office for Mac RCE Vulnerability CVE-2026-97750 – Immediate Update Required
Microsoft released a patch for a remote code execution flaw in Excel on macOS (CVE‑2026‑97750). The issue affects only Office for Mac; other Office products are unaffected. Install the update immediately to eliminate the risk.
Read briefing
CVE-2026-81386: Remote Code Execution in Microsoft Excel for Mac – Update Required
A remote code execution flaw (CVE‑2026‑81386) affects Microsoft Excel on macOS. The vulnerability can be exploited via a crafted spreadsheet, allowing attackers to execute arbitrary code. Office for Mac users must install the latest security update; other Office products are unaffected.
Read briefing
CVE-2026-97778: Microsoft Office Excel Remote Code Execution Vulnerability – Mac Update Available
A remote code execution flaw in Office Excel on macOS (CVE‑2026‑97778) allows attackers to run arbitrary code via crafted spreadsheets. Only macOS installations are affected; Microsoft has released a patch. Defenders should update immediately and verify the fix.
Read briefing
Microsoft Office for Mac Excel Remote Code Execution Vulnerability (CVE-2026-97747) – Immediate Patch Required
A remote code execution flaw exists in Microsoft Office Excel on macOS, identified as CVE-2026-97747. The vulnerability can be exploited by malicious documents, allowing arbitrary code execution. Microsoft has released a patch for Office for Mac; other Office products are unaffected.
Read briefing