Advisories
Microsoft Office for Mac RCE Vulnerability CVE‑2026‑97780 – Update Required
A remote code execution flaw (CVE‑2026‑97780) affects Microsoft Office for Mac. Users of the Mac version must install the latest security update; other Office products are unaffected. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
What happened
A remote code execution vulnerability (CVE‑2026‑97780) was discovered in Microsoft Office for Mac. The flaw can be triggered by a specially crafted Excel file, allowing an attacker to execute arbitrary code on the victim’s machine.
Affected systems
Only Microsoft Office for Mac installations are impacted. All other Microsoft Office products (Windows, iOS, Android) are not affected and require no action.
Mitigation
Download and install the latest Office security update for Mac from Microsoft’s release notes. The update addresses the RCE flaw and restores safe operation.
Defender actions
Verify that all Mac computers running Office have applied the update. Enable automatic updates where possible, and monitor for anomalous Excel activity or exploitation attempts.
Related vulnerabilities
Microsoft Excel for Mac RCE Vulnerability CVE-2026-81950 – Update Required
Microsoft released a security update for Office for Mac to fix a remote code execution flaw (CVE‑2026‑81950). The vulnerability affects all current Mac versions of Excel and can be triggered by malicious spreadsheets. Defenders should ensure Office for Mac is patched; other Office products are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-88196 – Update Required
Microsoft released a patch for a remote code execution flaw (CVE-2026-88196) affecting Office for Mac. Admins should install the update immediately; other Office products are unaffected.
Read briefing
Microsoft Office for Mac PowerPoint RCE Vulnerability CVE-2026-88178 Fixed
Microsoft released a patch for a remote code execution flaw in PowerPoint on macOS. Only Mac users of affected Office versions need to update; other Office platforms are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing