rootpwn

Advisories

Microsoft Excel for Mac RCE Vulnerability CVE-2026-81950 – Update Required

Microsoft released a security update for Office for Mac to fix a remote code execution flaw (CVE‑2026‑81950). The vulnerability affects all current Mac versions of Excel and can be triggered by malicious spreadsheets. Defenders should ensure Office for Mac is patched; other Office products are unaffected.

What Happened

Microsoft identified a remote code execution vulnerability (CVE‑2026‑81950) in Microsoft Excel for Mac. The flaw allows an attacker to execute arbitrary code when a user opens a crafted spreadsheet.

Impact

All current releases of Excel for Mac are vulnerable until the security update is applied. The vulnerability can be triggered by a malicious file, potentially giving attackers full system compromise. Other Microsoft Office products (Windows, iOS, Android) are not affected.

Mitigation

Install the latest Office for Mac update immediately. The patch is available through the standard update channel and can be downloaded from the Microsoft Security Update Guide. Verify the update by checking the Office version number or the update history.

Additional Notes

Defenders should monitor for exploitation attempts and block suspicious Office files from untrusted sources. No additional configuration changes are required beyond applying the update.

Excel Mac CVE-2026-81950 Remote Code Execution Microsoft Office Security Update MacOS

← All news