Advisories
Microsoft Excel Information Disclosure CVE-2026-81400: Patch Office for Mac
Microsoft released Office for Mac security updates for CVE-2026-81400, an information disclosure vulnerability in Microsoft Excel. Affected Mac Office installations should be patched; other Microsoft Office products are not listed as requiring action. Defenders should inventory Mac endpoints and verify the applicable update is deployed.
What happened
Microsoft released security updates for Microsoft Office for Mac to address CVE-2026-81400, an information disclosure vulnerability in Microsoft Excel. The advisory says the issue affects Mac-based Office software and that other Microsoft Office products do not require action.
Impact
Defenders should treat this as a potential data-exposure issue for Mac endpoints running affected Excel components. The source does not provide affected versions, exploitability, or severity, so scope should be confirmed against Microsoft release notes and internal patch inventory.
What to do
- Identify Mac systems running Microsoft Office and Excel, especially unmanaged or delayed-patch hosts.
- Apply the applicable Microsoft Office for Mac update from Microsoft release notes.
- Verify patch status after deployment and document any systems that cannot be updated immediately.
- Review recent Excel file handling and shared-folder or email-borne document activity if the environment has high exposure to untrusted Office files.
For this CVE, Microsoft's stated guidance is to install the Office for Mac update for the affected product; no action is required for other Microsoft Office software.