Vulnerabilities
Microsoft Office for Mac Excel Remote Code Execution Vulnerability (CVE‑2026‑97756) – Update Required
Microsoft released patches for a remote code execution flaw in Excel on Office for Mac (CVE‑2026‑97756). Mac users of Office must install the update immediately; other Office platforms are unaffected. Defenders should verify patch status and monitor for exploitation attempts.
What Happened
Microsoft identified a remote code execution vulnerability in Excel on Office for Mac (CVE‑2026‑97756). An attacker could trigger arbitrary code execution by delivering a crafted Excel file to a vulnerable user.
Affected Systems
- Microsoft Office for Mac – Excel component
- All Mac installations of Office that have not applied the latest security update
Mitigation
Install the security update released by Microsoft for Office for Mac. The update is available through the Mac App Store or Microsoft Update channels. No action is required for Windows, iOS, or Android Office installations.
Monitoring & Response
Verify that all Office for Mac machines have the latest update installed. Keep an eye on logs for anomalous Excel file processing or unexpected network activity. If a device remains unpatched, isolate it from the network until the update is applied.
Related vulnerabilities
CVE-2026-97773: Office for Mac RCE – Update Required
Microsoft released a patch for CVE‑2026‑97773, a remote code execution flaw in Office for Mac. Mac users of Excel must install the update immediately; other Office products are unaffected.
Read briefing
Microsoft Office Excel for Mac RCE Vulnerability CVE-2026-97007 – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on macOS. Mac users of Office 2021, 2023, and Microsoft 365 must install the update immediately. Other Office platforms are unaffected.
Read briefing
Microsoft Office Excel for Mac Remote Code Execution Vulnerability CVE-2026-97010 – Update Required
A remote code execution flaw in Microsoft Office Excel for Mac (CVE‑2026‑97010) allows attackers to run arbitrary code via a crafted workbook. Only the Mac version of Excel is affected; other Office products do not require action. Defenders must install the latest Mac update immediately.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-81396 Fixed
Microsoft released a patch for CVE-2026-81396, a remote code execution flaw in Excel on Mac. Mac Office users must install the update immediately; other platforms are unaffected.
Read briefing