Vulnerabilities
Microsoft Office for Mac Excel Information Disclosure CVE-2026-88184 – Immediate Update Required
Microsoft released a patch for an information‑disclosure flaw in Excel on Mac (CVE‑2026‑88184). Mac users of Office must install the update to prevent data leakage. Other Office platforms are unaffected.
What Happened
A flaw in Microsoft Excel for Mac allows attackers to read sensitive data from Excel files without authorization. The vulnerability is identified as CVE‑2026‑88184.
Affected Systems
Only Microsoft Office for Mac installations are vulnerable. Users of Office on Windows, Linux, or other platforms do not need to take any action.
Mitigation Steps
- Verify that Office for Mac is running the latest update (see Microsoft’s Release Notes).
- Download and install the patch from the official Microsoft update channel.
- Restart Office and confirm the update version matches the latest release.
Defender Guidance
Security teams should audit Mac endpoints for Office version compliance, enforce automatic updates, and monitor for any anomalous file access patterns that could indicate exploitation of the disclosure flaw.
Related vulnerabilities
Microsoft Excel Information Disclosure Vulnerability (CVE‑2026‑81391) – Office for Mac Update Required
Microsoft released a patch for CVE‑2026‑81391, an information‑disclosure flaw in Excel on macOS. Only Office for Mac users are affected; other Office editions do not need action. Install the update immediately to eliminate the risk.
Read briefing
Microsoft Office for Mac CVE-2026-80089: Information Disclosure – Update Required
A recent vulnerability (CVE-2026-80089) allows information disclosure in Microsoft Office for Mac. Users of the affected Mac version must install the security update immediately. Other Office products are not impacted.
Read briefing
Microsoft Excel Information Disclosure CVE-2026-81400: Patch Office for Mac
Microsoft released Office for Mac security updates for CVE-2026-81400, an information disclosure vulnerability in Microsoft Excel. Affected Mac Office installations should be patched; other Microsoft Office products are not listed as requiring action. Defenders should inventory Mac endpoints and verify the applicable update is deployed.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-97750 – Immediate Update Required
Microsoft released a patch for a remote code execution flaw in Excel on macOS (CVE‑2026‑97750). The issue affects only Office for Mac; other Office products are unaffected. Install the update immediately to eliminate the risk.
Read briefing