Vulnerabilities
Microsoft Office for Mac RCE Vulnerability CVE-2026-81396 Fixed
Microsoft released a patch for CVE-2026-81396, a remote code execution flaw in Excel on Mac. Mac Office users must install the update immediately; other platforms are unaffected.
What happened
Microsoft identified CVE-2026-81396, a remote code execution vulnerability in Excel for Mac. The flaw allows an attacker to execute arbitrary code when a malicious workbook is opened.
Impact
Only Microsoft Office for Mac is affected. Users of Windows, Linux, or other Office products are not impacted.
What to do
- Verify you are running Microsoft Office for Mac.
- Download and install the latest Office update from Microsoft’s official channels.
- Verify the update includes the CVE-2026-81396 fix.
- Consider disabling macro execution for untrusted files until the patch is applied.
Additional Notes
Microsoft recommends applying the update as soon as possible to mitigate the risk of exploitation.
Related vulnerabilities
Microsoft Office for Mac Excel RCE Vulnerability (CVE‑2026‑97767) – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on Office for Mac (CVE‑2026‑97767). Only Mac users of Office are impacted; other Office editions are unaffected. Defenders should verify that the Mac Office installation is updated to the latest version.
Read briefing
Microsoft Office for Mac Vulnerability CVE-2026-80082 – Information Disclosure
Microsoft Office for Mac is affected by CVE-2026-80082, an information‑disclosure flaw that can expose user data. The issue is fixed in the latest Office update; administrators should deploy the patch immediately. Non‑Mac Office users are not impacted.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing
Microsoft Office for Mac CVE‑2026‑88210 Security Feature Bypass Fixed
A security feature bypass in Microsoft Office for Mac (CVE‑2026‑88210) could allow code execution via malicious documents. The issue is fixed in the latest update; only Office for Mac users need to act. Other Office products are unaffected.
Read briefing