Microsoft
Microsoft Patch Tuesday, October 2026 Security Update Review
At a glance
Low rather than Medium: UK relevance is 40 of 100, little UK-specific signal so far.
Briefing
- IT teams should verify if affected Microsoft Office for Mac software is in use.
- Leaders should confirm whether the update applies to their organisation's software inventory.
- Businesses should check if they need to prioritise this update for Mac users.
Questions to ask IT
- Do we run Microsoft 365 Apps, Microsoft Office 2021, Microsoft Office 2024 and 1 more, and which versions?
- If it is not yet patched, what mitigation is in place, and by when?
Next steps
Monitor- For awareness — no fixed action deadline for this reporting
Vulnerability facts
Full CVE detail CVE-2026-97017- 8.8 · HighExploitable over the network without any account, but only if a user takes an action, such as opening a file or link. High impact on confidentiality, integrity and availability.CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Not listed
- ~0.8% estimated chance of attack in 30 days
- Security updates are available for Microsoft Office for Mac.
Next steps
Monitor- No immediate technical action — track if your estate depends on the products or vendors discussed
Summary
- Microsoft is announcing the availability of security updates for Microsoft Office for Mac.
- Customers running affected Mac software should install the update to be protected from a vulnerability.
- Customers running other Microsoft Office software do not need to take any action.
Read the original reportMicrosoft Security Update Guide RSS(opens in a new tab)
Products and services involved
- Microsoft 365 Apps93% match confidence · CVE-2026-97017
- Microsoft Office 202193% match confidence · CVE-2026-97017
- Microsoft Office 202493% match confidence · CVE-2026-97017
- Microsoft Office Online Server93% match confidence · CVE-2026-97017
Same event, different frames
Distinct often headline the same incident differently.
Pulse
Last checked 28 Oct · Recheck overdue since 4 Nov 2026, 20:35 UK time
- Story15 Oct 2026, 22:43 UK time · 15 Oct
Linked reporting from Microsoft Security Update Guide RSS (vendor psirt).
Read source (Microsoft Security Update Guide RSS) - Story24 Oct 2026, 18:36 UK time · 24 Oct
Linked reporting from Qualys (independent original reporter).
Read source (Qualys) - Update24 Oct 2026, 18:36 UK time · 24 Oct
1 corroborating source attached. Suggested changed to monitor.
3 entries so far. The timeline chart appears once this story has more history.
Sources
CVE-2026-97017 Microsoft Office Excel Remote Code Execution Vulnerability
- QualysNews
Microsoft Patch Tuesday, October 2026 Security Update Review
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ClaimedHeadline60% confidence
Microsoft Patch Tuesday, October 2026 Security Update Review
- ProbableSummary fact75% confidence
Microsoft is announcing the availability of the security updates for Microsoft Office for Mac. Customers running affected Mac software should install the update for their product to be protected from this vulnerability. Customers running other Microsoft Office software do not need to take any action. See the [Release Notes](https://go.microsoft.com/fwlink/p/?linkid=831049) for more information and download links.

