Vulnerabilities
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-78521 – Update Required
Microsoft has released patches for a remote code execution flaw (CVE-2026-78521) affecting Microsoft Office for Mac. The vulnerability can be triggered via malicious Word documents and allows arbitrary code execution. Office for Mac users must install the update immediately; other Office products are not impacted.
What happened
Microsoft identified a remote code execution flaw in Microsoft Office for Mac (CVE-2026-78521). The vulnerability can be exploited by opening a crafted Word document, enabling an attacker to run arbitrary code on the victim’s machine.
Impact
Only Microsoft Office for Mac installations are affected. Other Office products, including Windows and Office Online, are not vulnerable. The flaw permits full code execution, potentially leading to system compromise.
What to do
Office for Mac users should download and install the latest security update as soon as possible. If you are not running Office for Mac, no action is required. Verify that your Office version is up to date by checking the About menu in Word.
Related vulnerabilities
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing
Microsoft Office for Mac Excel RCE Vulnerability (CVE‑2026‑97767) – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on Office for Mac (CVE‑2026‑97767). Only Mac users of Office are impacted; other Office editions are unaffected. Defenders should verify that the Mac Office installation is updated to the latest version.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-81396 Fixed
Microsoft released a patch for CVE-2026-81396, a remote code execution flaw in Excel on Mac. Mac Office users must install the update immediately; other platforms are unaffected.
Read briefing
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-88202 – Immediate Update Required
Microsoft released a patch for Office for Mac to fix CVE‑2026‑88202, a remote code execution flaw. Users running the affected Mac version must update immediately; other Office products are not affected.
Read briefing