Advisories
Microsoft Office for Mac – CVE‑2026‑78510 Remote Code Execution Vulnerability Fixed
Microsoft released a patch for Office for Mac that addresses CVE‑2026‑78510, a remote code execution flaw in Word. Mac users should install the update immediately; other Office products are unaffected.
Microsoft Office for Mac users have been affected by a remote code execution vulnerability (CVE‑2026‑78510) in Word. The flaw allows an attacker to execute arbitrary code by crafting a malicious document.
What happened
The vulnerability exists in Word for Mac and can be triggered by opening a specially crafted file. It was discovered and reported to Microsoft, which has issued a security update.
Impact
Only installations of Microsoft Office for Mac are vulnerable. All other Microsoft Office products on Windows, Linux, or other platforms are not affected.
What to do
- Verify that you are running Microsoft Office for Mac.
- Download and install the latest Office update from the official Microsoft website.
- Restart the application and verify that the update has been applied.
- Monitor for any anomalous activity and keep the system patched.
Release Notes
Microsoft recommends installing the update immediately. Detailed release notes are available on the Microsoft Security Response Center website.