The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the june-16-2026 advisory.

  - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-44819, CVE-2026-44824, CVE-2026-45461, CVE-2026-45463, CVE-2026-45472, CVE-2026-45474,     CVE-2026-45475, CVE-2026-45645)

  - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over     a network. (CVE-2026-44822, CVE-2026-45455)

  - Integer underflow (wrap or wraparound) in Microsoft Office Excel allows an unauthorized attacker to     execute code locally. (CVE-2026-44817, CVE-2026-44818, CVE-2026-44820, CVE-2026-44823, CVE-2026-45469)

  - Protection mechanism failure in Microsoft Office Excel allows an unauthorized attacker to bypass a     security feature locally. (CVE-2026-45459)

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
    (CVE-2026-44821, CVE-2026-45460, CVE-2026-45485)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Security Updates for Microsoft Office Products (June 2026) (macOS)

medium Nessus Plugin ID 321311

Version 1.3

Version 1.2

Version 1.1

Version 1.3 Jun 22, 2026, 8:21 AM CVSS metrics ("CVSSv3 score" set to 4.3) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N") CVSSv3 score source (changed from "CVE-2026-45474" to "CVE-2026-45455") CVSSv3 severity (based on CVE-2026-45455, severity decreased from "High" to "Medium") Plugin Feed: 202606220821
Version 1.2 Jun 19, 2026, 10:00 PM Plugin metadata (Add IAVM Info) Plugin Feed: 202606192200
Version 1.1 Jun 17, 2026, 9:10 AM New Plugin Feed: 202606170910