Sign in with Microsoft
Sign in or create an account.
Hello,
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.

Summary

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-004.

Note To apply this security update, you must have the release version of Office 2016 installed on the computer.

For a complete list of affected versions of Microsoft Office software, see KB3124585.


How to obtain and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Download Download the security update KB2920727 for 32-bit version of Office 2016

More Information

Known issues in this security update

  • After you install this security update, you have problems that affect your Access database if you use certain Windows common controls. Specifically, these problems occur if you use the controls that are associated with the MSCOMCTL.OCX file that's updated in the security update. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

    3139567 Error messages or Access crashes after you install security update MS16-004

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base Article KB3124585.

Security update replacement information

This security update doesn't replace any previously released update.

Package Name

Package Hash SHA 1

Package Hash SHA 2

mscomctlocx2016-kb2920727-fullfile-x86-glb.exe

07AA02F6EB1BB2AFDDC44CBC099554C1143712CC

4C86F09A035E89891D8195ECED019F3511B58758406A765FBF994208B0688A22


The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of Office 2016

File identifier

File name

File version

File size

Date

Time

mscomctl.ocx

mscomctl.ocx

8-Dec-15

09:17


Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!

×