Vulnerabilities
Microsoft Office for Mac: CVE-2026-80090 Information Disclosure Vulnerability Fixed
Microsoft released patches for Office for Mac to fix CVE-2026-80090, an information‑disclosure flaw in Word. Mac users of affected Office versions must update immediately; other Office platforms are not impacted.
What happened
Microsoft identified CVE-2026-80090, an information‑disclosure vulnerability in Word that could leak sensitive data when processing malicious documents.
Who is affected
Users of Microsoft Office for Mac versions that include the vulnerable Word component. No impact on Windows, Linux, or mobile Office installations.
Impact
Potential exposure of confidential information embedded in crafted documents. No known exploitation in the wild, but the flaw allows attackers to read data from memory or files.
What to do
Download and install the Office for Mac update from the Microsoft Update Catalog or Office Update channel. Verify the patch by checking the Office version number (should be 16.0.?? or newer). No additional configuration changes required.
Mitigation for unpatched systems
Restrict macro execution, disable automatic document opening from untrusted sources, and enforce strict file‑type filtering on shared drives.