Vulnerabilities
Microsoft Excel for Mac Remote Code Execution Vulnerability (CVE‑2026‑81954) – Patch Available
Microsoft released a patch for a remote code execution flaw in Excel on macOS (CVE‑2026‑81954). Mac users of Office must install the update immediately; other Office products are unaffected.
What happened
Microsoft identified a remote code execution vulnerability in Excel for macOS, assigned CVE‑2026‑81954. The flaw allows an attacker to execute arbitrary code by delivering a specially crafted workbook.
Impact
Only Microsoft Office for Mac installations are affected. Other Office products on macOS, Windows, or iOS are not vulnerable. The vulnerability can lead to full system compromise if exploited.
What to do
Mac users of Office should download and install the latest security update from the Office update mechanism. No action is required for users of other Office versions.
Related vulnerabilities
Microsoft Office for Mac RCE Vulnerability CVE-2026-81396 Fixed
Microsoft released a patch for CVE-2026-81396, a remote code execution flaw in Excel on Mac. Mac Office users must install the update immediately; other platforms are unaffected.
Read briefing
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-97752
A remote code execution flaw in Microsoft Office for Mac Excel (CVE‑2026‑97752) allows attackers to run arbitrary code via malicious files. Only Mac users are affected; Windows and other platforms are safe. Defenders should apply the available update immediately.
Read briefing
Microsoft Office for Mac – CVE-2026‑81959 Remote Code Execution Vulnerability Fixed
Microsoft released a patch for a remote code execution flaw in Excel on Mac (CVE‑2026‑81959). Mac users of Office must update immediately; other Office platforms are unaffected.
Read briefing
Microsoft Excel Remote Code Execution Vulnerability CVE-2026-55039 Acknowledged
Microsoft has acknowledged a remote code execution flaw in Excel (CVE‑2026‑55039). No patch is currently available, and defenders should monitor for updates and enforce best practices until a fix is released.
Read briefing