Vulnerabilities
Microsoft Office for Mac CVE‑2026‑88210 Security Feature Bypass Fixed
A security feature bypass in Microsoft Office for Mac (CVE‑2026‑88210) could allow code execution via malicious documents. The issue is fixed in the latest update; only Office for Mac users need to act. Other Office products are unaffected.
What happened
Microsoft identified a security feature bypass in Microsoft Office for Mac that could allow an attacker to execute arbitrary code when a malicious document is opened. The flaw is tracked as CVE‑2026‑88210.
Impact
- Only Microsoft Office for Mac versions affected by the update are vulnerable.
- Other Microsoft Office products (Windows, iOS, Android) are not impacted.
What to do
Admins should verify that Office for Mac is running the latest patch. Deploy the update via Microsoft Update or the Office installer. No action is required for other Office installations.
Mitigation
Until the patch is applied, avoid opening documents from untrusted sources and disable the vulnerable feature if possible via Office preferences.
Related vulnerabilities
Microsoft Office for Mac Vulnerability CVE-2026-80082 – Information Disclosure
Microsoft Office for Mac is affected by CVE-2026-80082, an information‑disclosure flaw that can expose user data. The issue is fixed in the latest Office update; administrators should deploy the patch immediately. Non‑Mac Office users are not impacted.
Read briefing
Microsoft patches Excel RCE CVE-2026-81389 in Office for Mac
Microsoft released security updates for Microsoft Office for Mac to address CVE-2026-81389, a remote code execution vulnerability in Microsoft Excel. Organizations should patch affected Mac Office installations and monitor for exploitation attempts. Other Microsoft Office products are not reported to require action.
Read briefing
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-77901 – Immediate Patch Required
A remote code execution flaw (CVE-2026-77901) affects Microsoft Office for Mac. The issue is fixed in the latest Office update; other Office versions are not impacted. SecOps should verify that Mac users have applied the patch and monitor for exploitation attempts.
Read briefing
Microsoft Office for Mac CVE-2026-80089: Information Disclosure – Update Required
A recent vulnerability (CVE-2026-80089) allows information disclosure in Microsoft Office for Mac. Users of the affected Mac version must install the security update immediately. Other Office products are not impacted.
Read briefing