Vulnerabilities
Microsoft Office Excel for Mac Remote Code Execution Vulnerability CVE-2026-97010 – Update Required
A remote code execution flaw in Microsoft Office Excel for Mac (CVE‑2026‑97010) allows attackers to run arbitrary code via a crafted workbook. Only the Mac version of Excel is affected; other Office products do not require action. Defenders must install the latest Mac update immediately.
What happened
A remote code execution vulnerability (CVE-2026-97010) was discovered in Microsoft Office Excel for Mac. The flaw allows an attacker to execute arbitrary code when a user opens a crafted Excel file.
Impact
Only Microsoft Office for Mac (Excel) is affected. Other Office products on macOS, Windows, or iOS are not impacted.
What to do
Install the latest Office update for Mac immediately. The update is available through the standard update channel. Verify the installed version matches the patched build listed in Microsoft’s release notes.
Microsoft recommends installing the update to protect against the vulnerability.
Additional Guidance
Defenders should monitor for delivery of malicious Excel workbooks via email or shared drives. Enable macro restrictions and consider applying the “Office 365 Advanced Threat Protection” policy if available.
Related vulnerabilities
CVE-2026-97773: Office for Mac RCE – Update Required
Microsoft released a patch for CVE‑2026‑97773, a remote code execution flaw in Office for Mac. Mac users of Excel must install the update immediately; other Office products are unaffected.
Read briefing
Microsoft Office Excel for Mac RCE Vulnerability CVE-2026-97007 – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on macOS. Mac users of Office 2021, 2023, and Microsoft 365 must install the update immediately. Other Office platforms are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-81396 Fixed
Microsoft released a patch for CVE-2026-81396, a remote code execution flaw in Excel on Mac. Mac Office users must install the update immediately; other platforms are unaffected.
Read briefing
Microsoft Office for Mac Excel RCE Vulnerability (CVE‑2026‑97767) – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on Office for Mac (CVE‑2026‑97767). Only Mac users of Office are impacted; other Office editions are unaffected. Defenders should verify that the Mac Office installation is updated to the latest version.
Read briefing