Vulnerabilities
CVE-2026-97778: Microsoft Office Excel Remote Code Execution Vulnerability – Mac Update Available
A remote code execution flaw in Office Excel on macOS (CVE‑2026‑97778) allows attackers to run arbitrary code via crafted spreadsheets. Only macOS installations are affected; Microsoft has released a patch. Defenders should update immediately and verify the fix.
What happened
A remote code execution flaw (CVE‑2026‑97778) was discovered in Microsoft Office Excel on macOS. The vulnerability allows an attacker to run arbitrary code by delivering a crafted spreadsheet.
Impact
Only macOS installations of Microsoft Office are affected. Successful exploitation could give an attacker full control over the victim’s machine.
What to do
- Install the latest Office update for macOS immediately.
- Verify that the patch is applied by checking the Office version in the About dialog.
- Monitor logs for suspicious activity and block known malicious file types if possible.