Vulnerabilities
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-77901 – Immediate Patch Required
A remote code execution flaw (CVE-2026-77901) affects Microsoft Office for Mac. The issue is fixed in the latest Office update; other Office versions are not impacted. SecOps should verify that Mac users have applied the patch and monitor for exploitation attempts.
What happened
Microsoft identified a remote code execution vulnerability in Office for Mac that could allow an attacker to execute arbitrary code via a crafted document.
Impact
Only users of Microsoft Office for Mac are at risk. Other Office products (Windows, iOS, Android) are not affected.
Mitigation
- Install the latest Office for Mac update.
- Verify that Mac systems are running the patched version.
- Disable automatic document opening from untrusted sources if possible.
What to do next
SecOps should audit Mac workstations for the presence of the update, enforce patch compliance, and monitor for suspicious document handling.
Related vulnerabilities
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-88202 – Immediate Update Required
Microsoft released a patch for Office for Mac to fix CVE‑2026‑88202, a remote code execution flaw. Users running the affected Mac version must update immediately; other Office products are not affected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-97750 – Immediate Update Required
Microsoft released a patch for a remote code execution flaw in Excel on macOS (CVE‑2026‑97750). The issue affects only Office for Mac; other Office products are unaffected. Install the update immediately to eliminate the risk.
Read briefing
Microsoft Office for Mac Excel Remote Code Execution Vulnerability (CVE-2026-97747) – Immediate Patch Required
A remote code execution flaw exists in Microsoft Office Excel on macOS, identified as CVE-2026-97747. The vulnerability can be exploited by malicious documents, allowing arbitrary code execution. Microsoft has released a patch for Office for Mac; other Office products are unaffected.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing