Vulnerabilities
Microsoft Office for Mac – CVE-2026-70254 Remote Code Execution Requires Immediate Patch
A remote code execution flaw in Microsoft Office Excel on macOS (CVE-2026-70254) has been fixed in the latest security update. Mac users of Office must install the patch to mitigate the risk; other Office platforms are unaffected. Update now to prevent exploitation.
What Happened
Microsoft identified a remote code execution vulnerability in Excel for macOS, assigned CVE‑2026‑70254. The flaw allows an attacker to execute arbitrary code via a crafted workbook.
Impact
Only Microsoft Office for Mac installations are affected. Other Office products, including Windows and web versions, are not vulnerable.
What to Do
Mac users running Office should download and install the latest security update immediately. Verify the update by checking the Office version number or the update history. Non‑Mac Office users need not take action.
Refer to Microsoft’s release notes for download links and additional guidance.
Related vulnerabilities
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-88202 – Immediate Update Required
Microsoft released a patch for Office for Mac to fix CVE‑2026‑88202, a remote code execution flaw. Users running the affected Mac version must update immediately; other Office products are not affected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-81396 Fixed
Microsoft released a patch for CVE-2026-81396, a remote code execution flaw in Excel on Mac. Mac Office users must install the update immediately; other platforms are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-97750 – Immediate Update Required
Microsoft released a patch for a remote code execution flaw in Excel on macOS (CVE‑2026‑97750). The issue affects only Office for Mac; other Office products are unaffected. Install the update immediately to eliminate the risk.
Read briefing
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-77901 – Immediate Patch Required
A remote code execution flaw (CVE-2026-77901) affects Microsoft Office for Mac. The issue is fixed in the latest Office update; other Office versions are not impacted. SecOps should verify that Mac users have applied the patch and monitor for exploitation attempts.
Read briefing