Multiple CVEs for Microsoft Office on Mac and Android Released
Article Content
- •Microsoft released security updates for multiple CVEs affecting Office for Mac and Android.
- •Affected users are urged to install updates to protect against potential exploits.
- •The vulnerabilities could allow unauthorized access to user data.
On June 19, 2026, Microsoft announced security updates for multiple vulnerabilities (CVE-2026) affecting Microsoft Office for Mac and Android. Customers using affected versions of Microsoft Office for Mac and Android are urged to install these updates to mitigate risks associated with these vulnerabilities. The vulnerabilities could potentially allow unauthorized access or exploitation of user data. Specific CVEs include CVE-2026-45486, CVE-2026-45458, and others, all requiring immediate action from users. The updates address critical flaws that could impact a significant number of users across platforms. Microsoft emphasizes that users of other Office software do not need to take action. The updates are available through the Microsoft Security Response Center.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (36)
Following this threat?
Track Microsoft in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Authentication Bypass in Rejetto HFS Exploited Within 24 Hours Anthropic's Mythos model identified a critical authentication bypass in Rejetto HTTP File Server (HFS), tracked as CVE-2026-61500, allowing remote code execution. Discovered by Horizon3 researcher Zach Hanley, the flaw was revealed on September 27, 2026, and exploitation began within 24 hours, with attacks traced to… 
Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited In late September 2026, two critical zero-day vulnerabilities (CVE-2026-88771 and CVE-2026-88772) in Citrix NetScaler ADC and Gateway were actively exploited, allowing remote code execution. The Cybersecurity and Infrastructure Security Agency (CISA) added these CVEs to its Known Exploited Vulnerabilities catalog on…