rootpwn

Vulnerabilities

Microsoft Office for Mac: CVE-2026-80090 Information Disclosure Vulnerability Fixed

Microsoft released patches for Office for Mac to fix CVE-2026-80090, an information‑disclosure flaw in Word. Mac users of affected Office versions must update immediately; other Office platforms are not impacted.

What happened

Microsoft identified CVE-2026-80090, an information‑disclosure vulnerability in Word that could leak sensitive data when processing malicious documents.

Who is affected

Users of Microsoft Office for Mac versions that include the vulnerable Word component. No impact on Windows, Linux, or mobile Office installations.

Impact

Potential exposure of confidential information embedded in crafted documents. No known exploitation in the wild, but the flaw allows attackers to read data from memory or files.

What to do

Download and install the Office for Mac update from the Microsoft Update Catalog or Office Update channel. Verify the patch by checking the Office version number (should be 16.0.?? or newer). No additional configuration changes required.

Mitigation for unpatched systems

Restrict macro execution, disable automatic document opening from untrusted sources, and enforce strict file‑type filtering on shared drives.

Microsoft Office Mac Information Disclosure CVE-2026-80090 Patch Word Security Update

← All news