Vulnerabilities
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
What happened
A vulnerability (CVE-2026-70287) in Microsoft Office for Mac allows an attacker to execute arbitrary code by opening a crafted Word document. The flaw is triggered during document parsing and can be exploited remotely.
Impact
Only Mac installations of Microsoft Office are affected. Windows, Linux, and other Office products are not vulnerable. Successful exploitation grants the attacker full control over the target system.
What to do
- Verify that Office for Mac is running the latest update (build 16.x.x.x or newer).
- Use Microsoft AutoUpdate or the Office 365 portal to download and install the patch.
- Confirm installation by checking the Office version in the About dialog.
- Monitor for anomalous process activity or unexpected network connections that may indicate exploitation.
Related vulnerabilities
Microsoft Office for Mac RCE Vulnerability CVE-2026-97750 – Immediate Update Required
Microsoft released a patch for a remote code execution flaw in Excel on macOS (CVE‑2026‑97750). The issue affects only Office for Mac; other Office products are unaffected. Install the update immediately to eliminate the risk.
Read briefing
Microsoft Office for Mac Excel RCE Vulnerability (CVE‑2026‑97767) – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on Office for Mac (CVE‑2026‑97767). Only Mac users of Office are impacted; other Office editions are unaffected. Defenders should verify that the Mac Office installation is updated to the latest version.
Read briefing
Microsoft Excel for Mac RCE Vulnerability CVE-2026-81950 – Update Required
Microsoft released a security update for Office for Mac to fix a remote code execution flaw (CVE‑2026‑81950). The vulnerability affects all current Mac versions of Excel and can be triggered by malicious spreadsheets. Defenders should ensure Office for Mac is patched; other Office products are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE‑2026‑97780 – Update Required
A remote code execution flaw (CVE‑2026‑97780) affects Microsoft Office for Mac. Users of the Mac version must install the latest security update; other Office products are unaffected. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing