rootpwn

Vulnerabilities

Microsoft Office Excel for Mac RCE Vulnerability CVE-2026-97007 – Update Required

Microsoft has released patches for a remote code execution flaw in Excel on macOS. Mac users of Office 2021, 2023, and Microsoft 365 must install the update immediately. Other Office platforms are unaffected.

Microsoft has issued a security update for a remote code execution vulnerability (CVE‑2026‑97007) affecting Microsoft Excel on macOS. The flaw allows an attacker to execute arbitrary code via a crafted Excel file.

Affected Systems

  • Microsoft Office for Mac (2021, 2023, Microsoft 365)
  • Excel component only; other Office apps not impacted

Mitigation

  • Install the latest Office update for macOS from the Microsoft Update catalog or via the Office application’s update mechanism.
  • Verify that the update includes the CVE‑2026‑97007 fix (check version numbers in release notes).
  • Disable automatic file opening from untrusted sources if possible.

Non‑Affected Platforms

Users of Windows, Linux, or iOS/macOS versions of other Office applications do not need to take action.

Additional Information

For detailed release notes and download links, refer to Microsoft’s official update page.

Microsoft Office Excel macOS CVE-2026-97007 Remote Code Execution Patch SecOps

← All news