Advisories
Microsoft Excel for Mac RCE Vulnerability CVE-2026-81950 – Update Required
Microsoft released a security update for Office for Mac to fix a remote code execution flaw (CVE‑2026‑81950). The vulnerability affects all current Mac versions of Excel and can be triggered by malicious spreadsheets. Defenders should ensure Office for Mac is patched; other Office products are unaffected.
What Happened
Microsoft identified a remote code execution vulnerability (CVE‑2026‑81950) in Microsoft Excel for Mac. The flaw allows an attacker to execute arbitrary code when a user opens a crafted spreadsheet.
Impact
All current releases of Excel for Mac are vulnerable until the security update is applied. The vulnerability can be triggered by a malicious file, potentially giving attackers full system compromise. Other Microsoft Office products (Windows, iOS, Android) are not affected.
Mitigation
Install the latest Office for Mac update immediately. The patch is available through the standard update channel and can be downloaded from the Microsoft Security Update Guide. Verify the update by checking the Office version number or the update history.
Additional Notes
Defenders should monitor for exploitation attempts and block suspicious Office files from untrusted sources. No additional configuration changes are required beyond applying the update.