Vulnerabilities
CVE-2026-97770: Remote Code Execution in Microsoft Office Excel for Mac – Update Required
Microsoft Office for Mac users are exposed to a remote code execution vulnerability (CVE-2026-97770) that can be triggered via a crafted Excel file. The vendor has released a patch; all Mac Office installations should be updated immediately. Non‑Mac Office products are unaffected.
What Happened
A remote code execution flaw was discovered in Microsoft Office Excel for Mac. The vulnerability (CVE-2026-97770) can be triggered by opening a specially crafted .xlsx file, allowing an attacker to execute arbitrary code on the victim’s machine.
Impact
Only Microsoft Office for Mac installations are affected. All other Office products, including Windows, Linux, and mobile versions, are not vulnerable. The flaw can lead to full system compromise if exploited.
What to Do
Administrators should:
- Verify that all Mac Office installations are running the latest version (update to the patch released on 2026‑10‑15).
- Use the Microsoft Update Catalog or Office Deployment Tool to push the update to all managed Macs.
- Verify that the update has been applied by checking the Office version number (should be 16.?? or later).
Related vulnerabilities
Microsoft Office for Mac RCE Vulnerability CVE-2026-81396 Fixed
Microsoft released a patch for CVE-2026-81396, a remote code execution flaw in Excel on Mac. Mac Office users must install the update immediately; other platforms are unaffected.
Read briefing
Microsoft Office for Mac Excel RCE Vulnerability (CVE‑2026‑97767) – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on Office for Mac (CVE‑2026‑97767). Only Mac users of Office are impacted; other Office editions are unaffected. Defenders should verify that the Mac Office installation is updated to the latest version.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-97750 – Immediate Update Required
Microsoft released a patch for a remote code execution flaw in Excel on macOS (CVE‑2026‑97750). The issue affects only Office for Mac; other Office products are unaffected. Install the update immediately to eliminate the risk.
Read briefing
Microsoft Office for Mac – CVE-2026‑81959 Remote Code Execution Vulnerability Fixed
Microsoft released a patch for a remote code execution flaw in Excel on Mac (CVE‑2026‑81959). Mac users of Office must update immediately; other Office platforms are unaffected.
Read briefing