Advisories
Microsoft Office for Mac RCE Vulnerability CVE-2026-88196 – Update Required
Microsoft released a patch for a remote code execution flaw (CVE-2026-88196) affecting Office for Mac. Admins should install the update immediately; other Office products are unaffected.
What happened
A remote code execution vulnerability (CVE-2026-88196) was discovered in Microsoft Office for Mac. The flaw allows an attacker to execute arbitrary code on a victim’s machine through specially crafted Office documents.
Impact
Only Microsoft Office for Mac installations are affected. Other Microsoft Office products on Windows, Linux, or mobile do not require action.
What to do
Install the latest Office for Mac update immediately. Verify that the update includes the security fix for CVE-2026-88196. No action is required for other Office versions.
Related vulnerabilities
Microsoft Excel for Mac RCE Vulnerability CVE-2026-81950 – Update Required
Microsoft released a security update for Office for Mac to fix a remote code execution flaw (CVE‑2026‑81950). The vulnerability affects all current Mac versions of Excel and can be triggered by malicious spreadsheets. Defenders should ensure Office for Mac is patched; other Office products are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE‑2026‑97780 – Update Required
A remote code execution flaw (CVE‑2026‑97780) affects Microsoft Office for Mac. Users of the Mac version must install the latest security update; other Office products are unaffected. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing
Microsoft Office for Mac PowerPoint RCE Vulnerability CVE-2026-88178 Fixed
Microsoft released a patch for a remote code execution flaw in PowerPoint on macOS. Only Mac users of affected Office versions need to update; other Office platforms are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing