🟠 High | Source: Microsoft Security Response Center
A remote code execution vulnerability (CVE-2026-45469) has been identified in Microsoft Excel for Mac. An attacker exploiting this flaw could execute arbitrary code on an affected system, potentially gaining full control. Only users running Microsoft Office on macOS are affected; other platforms do not require action.
Security Architect’s Take: Ensure macOS endpoints running Microsoft Office are patched immediately via the update referenced in the release notes. If you manage a fleet of Mac devices through MDM (e.g. Jamf or Intune), prioritise deploying this update and confirm compliance before end of the current patching cycle.
Original advisory: CVE-2026-45469 Microsoft Excel Remote Code Execution Vulnerability