The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the july-14-2026 advisory.

  - Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
    (CVE-2026-55045)

  - Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code     locally. (CVE-2026-55141, CVE-2026-55899)

  - Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
    (CVE-2026-47642, CVE-2026-54131, CVE-2026-55948)

  - Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to disclose     information locally. (CVE-2026-48580, CVE-2026-55138)

  - Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information     locally. (CVE-2026-50408, CVE-2026-54988, CVE-2026-55046, CVE-2026-55122, CVE-2026-55898)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Security Updates for Microsoft Office Products (July 2026) (macOS)

high Nessus Plugin ID 326952

Version 1.4

Version 1.3

Version 1.1

Version 1.4 Sep 14, 2026, 6:39 PM CVSS metrics ("CVSSv2 score" set to 6.6) CVSS metrics ("CVSSv2 vector" set to "CVSS2#AV:L/AC:L/Au:N/C:C/I:N/A:C") CVSSv2 score source (changed from "CVE-2026-55899" to "CVE-2026-55898") CVSSv2 severity (based on CVE-2026-55898, severity decreased from "High" to "Medium") CVSSv3 score source (changed from "CVE-2026-55898" to none) Plugin Feed: 202609141839
Version 1.3 Jul 18, 2026, 3:00 PM CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H") CVSSv3 score source (changed from "CVE-2026-55045" to "CVE-2026-55898") Plugin metadata (Add IAVM Info) Plugin Feed: 202607181500
Version 1.1 Jul 15, 2026, 3:14 PM New Plugin Feed: 202607151514