Vulnerabilities
Microsoft Office for Mac Remote Code Execution Vulnerability (CVE‑2026‑88150) – Update Required
A remote code execution flaw exists in Microsoft Office Word for macOS, identified as CVE‑2026‑88150. Affected users must install the latest Office for Mac patch to prevent exploitation. Other Office products are not impacted.
What Happened
Microsoft identified a remote code execution vulnerability in Word for macOS, catalogued as CVE‑2026‑88150. The flaw allows an attacker to execute arbitrary code on a victim’s machine through a crafted document.
Impact
Only Microsoft Office for Mac installations are affected. The vulnerability can be triggered without user interaction if a malicious file is opened, potentially compromising the entire system.
What to Do
- Verify that your Office for Mac installation is current. If not, download and install the latest update from Microsoft’s release notes.
- Other Office products (Windows, iOS, Android) are not affected; no action required for those platforms.
- Maintain regular patch management practices to avoid similar exposures.
Related vulnerabilities
Microsoft Office for Mac Remote Code Execution Vulnerability CVE-2026-78521 – Update Required
Microsoft has released patches for a remote code execution flaw (CVE-2026-78521) affecting Microsoft Office for Mac. The vulnerability can be triggered via malicious Word documents and allows arbitrary code execution. Office for Mac users must install the update immediately; other Office products are not impacted.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-70287 – Immediate Update Required
A remote code execution flaw exists in Microsoft Office for Mac that can be triggered via a malicious Word document. Affected users must install the latest Office update; other Office products are not impacted. Defenders should verify that Mac installations are patched and monitor for exploitation attempts.
Read briefing
Microsoft Office for Mac Excel RCE Vulnerability (CVE‑2026‑97767) – Update Required
Microsoft has released patches for a remote code execution flaw in Excel on Office for Mac (CVE‑2026‑97767). Only Mac users of Office are impacted; other Office editions are unaffected. Defenders should verify that the Mac Office installation is updated to the latest version.
Read briefing
Microsoft Office for Mac RCE Vulnerability CVE-2026-81396 Fixed
Microsoft released a patch for CVE-2026-81396, a remote code execution flaw in Excel on Mac. Mac Office users must install the update immediately; other platforms are unaffected.
Read briefing