Vulnerabilities
CVE-2026-97773: Office for Mac RCE – Update Required
Microsoft released a patch for CVE‑2026‑97773, a remote code execution flaw in Office for Mac. Mac users of Excel must install the update immediately; other Office products are unaffected.
What Happened
A remote code execution vulnerability (CVE‑2026‑97773) was discovered in Microsoft Office for Mac, specifically affecting Excel. The flaw allows an attacker to execute arbitrary code when a malicious spreadsheet is opened.
Impact
- Only Office for Mac users are affected.
- Excel is the component with the flaw; other Office applications are not impacted.
- Potential for full system compromise if exploited.
What to Do
Mac users running Office 2023 or later should immediately install the security update released by Microsoft. Use the built‑in update mechanism or download the patch from the Office update channel. Verify the update by checking the Office version in the About dialog.
Additional Guidance
Defenders should monitor for anomalous activity in Excel processes and ensure that macro execution policies are enforced.
Related vulnerabilities
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing
Microsoft Office for Mac Excel RCE Vulnerability (CVE‑2026‑97767) – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on Office for Mac (CVE‑2026‑97767). Only Mac users of Office are impacted; other Office editions are unaffected. Defenders should verify that the Mac Office installation is updated to the latest version.
Read briefing
Microsoft Excel for Mac RCE Vulnerability CVE-2026-81950 – Update Required
Microsoft released a security update for Office for Mac to fix a remote code execution flaw (CVE‑2026‑81950). The vulnerability affects all current Mac versions of Excel and can be triggered by malicious spreadsheets. Defenders should ensure Office for Mac is patched; other Office products are unaffected.
Read briefing
Microsoft Office Excel for Mac RCE Vulnerability CVE-2026-97007 – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on macOS. Mac users of Office 2021, 2023, and Microsoft 365 must install the update immediately. Other Office platforms are unaffected.
Read briefing