Advisories
CVE-2026-97766: Remote Code Execution in Microsoft Office for Mac – Update Required
Microsoft released security updates for Office for Mac to mitigate CVE‑2026‑97766, a remote code execution flaw. Mac users must install the patch; other Office products are unaffected. Defenders should verify patch status and monitor for exploitation attempts.
What happened
Microsoft Office for Mac contains a flaw (CVE‑2026‑97766) that allows an attacker to execute arbitrary code remotely by delivering a crafted spreadsheet file.
Impact
Only Office for Mac installations are vulnerable. Other Office products, including Windows and web versions, are not affected.
What to do
Defenders should immediately apply the available update for Office for Mac. Verify that the patch has been installed on all managed endpoints. No action is required for other Office deployments.
- Check the installed Office version on Mac devices.
- Download and install the update from the Microsoft Update Catalog or the Office update channel.
- Confirm that the update includes the CVE‑2026‑97766 fix.
- Monitor for any suspicious activity related to spreadsheet processing.
Related vulnerabilities
Microsoft Office for Mac RCE Vulnerability CVE-2026-88196 – Update Required
Microsoft released a patch for a remote code execution flaw (CVE-2026-88196) affecting Office for Mac. Admins should install the update immediately; other Office products are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE‑2026‑97780 – Update Required
A remote code execution flaw (CVE‑2026‑97780) affects Microsoft Office for Mac. Users of the Mac version must install the latest security update; other Office products are unaffected. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing
Microsoft Excel for Mac RCE Vulnerability CVE-2026-81950 – Update Required
Microsoft released a security update for Office for Mac to fix a remote code execution flaw (CVE‑2026‑81950). The vulnerability affects all current Mac versions of Excel and can be triggered by malicious spreadsheets. Defenders should ensure Office for Mac is patched; other Office products are unaffected.
Read briefing
CVE-2026-78512: Microsoft Office for Mac Remote Code Execution Vulnerability Fixed
Microsoft released patches for Office for Mac that address CVE‑2026‑78512, a remote code execution flaw in Word. Mac users must apply the update immediately; other Office products are unaffected.
Read briefing