Vulnerabilities
Microsoft Office Excel for Mac RCE Vulnerability CVE-2026-97007 – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on macOS. Mac users of Office 2021, 2023, and Microsoft 365 must install the update immediately. Other Office platforms are unaffected.
Microsoft has issued a security update for a remote code execution vulnerability (CVE‑2026‑97007) affecting Microsoft Excel on macOS. The flaw allows an attacker to execute arbitrary code via a crafted Excel file.
Affected Systems
- Microsoft Office for Mac (2021, 2023, Microsoft 365)
- Excel component only; other Office apps not impacted
Mitigation
- Install the latest Office update for macOS from the Microsoft Update catalog or via the Office application’s update mechanism.
- Verify that the update includes the CVE‑2026‑97007 fix (check version numbers in release notes).
- Disable automatic file opening from untrusted sources if possible.
Non‑Affected Platforms
Users of Windows, Linux, or iOS/macOS versions of other Office applications do not need to take action.
Additional Information
For detailed release notes and download links, refer to Microsoft’s official update page.