Summary

This security update resolves a vulnerability in Microsoft Office. The vulnerability could allow remote code execution if a user opens a specially crafted Office file. To learn more about the vulnerability, see Microsoft Security Bulletin MS15-110.

More information about this security update

The following articles contain more information about this security update as it relates to individual product versions. The articles may contain known issue information.

  • Translates some terms in multiple languages to make sure that the meaning is correct.

  • This update changes the way temporary file names are generated for features such as opening read-only files from UNC shared folders, sending workbooks as email attachments, and interacting with shared workbooks. This makes sure that the correct operation occurs when many temporary files are created and opened.

  • This update contains fixes for the following nonsecurity issues:

    • When you create a SharePoint site by using a saved template that has a site feed Web Part, you experience the following issues:

      • Post to the site feed Web Part isn't displayed in the search result.

      • If you search for text in the posts, the results are not displayed as conversations.

      • If a post has hash tags, the tags never are counted in trending tags, and the post is not displayed on the hash-tag profile page.

    • When you create a site that is based on a site template that has the Community Site feature enabled, you can't see communities, and you receive the following error message:

      Cannot complete this action. Please try again.

      This update disables the option to Save site as a template for a site that has the Community Site feature enabled.

    • If a document set has a shared field of the SharePoint integer type, the value of the field isn't propagated to documents inside the document set.

    • When you receive a message about a discussion list, the author of the post isn't displayed.

    • Invalid XML in CMIS fields doesn't ignore browser processing as expected.

    • Site-deleting notification displays an incorrect date if the site regional setting locale isn't set to en-us.

    • When you create a document set, all entered data is lost if a field validation fails.

    • If an app that has a feature is used on a source label, new variation labels can't be created because the variation to create a hierarchies job fails.

    • Incremental crawls on certain crawl sources cause sustained high CPU usage and gradually increasing memory consumption.

    • When you use managed metadata navigation and filtering, the halo around the active item on the menu is truncated, and the separator of the navigation bar is displayed with an inconsistent width.

    • Created and changed dates are displayed incorrectly for documents in a document set that are moved to the Drop Off library of a Records Center site.

    • When you try to create a page by using a name that contains a space, you receive an error message that states that the special characters aren't allowed.

    • Lync and Skype of Business presence doesn't work on the "people search" results page in the SharePoint Server 2013 search center.

    • Product names such as Word and Excel are translated in the search result page of the search center in the Finnish language.

    • Fixes the following issues in the Azure plugin in the hybrid crawler:

      • Sends headers with additional information to secure cloud services (SCS).

      • Fixes Azure plugin freezes because of status change (pause or resume).

      • Fixes the spoindextypename value.

    • The exception in UrlMapper.RefreshCache may cause the w3wp.exe process to crash. You can't access the site, and data loss occurs.

    • You can't use the ManagedProperty.Update method to update the UseAAMMapping property.

    • You can't access a document by using a DocID URL on mobile devices. For example, a DocID URL resembles the following:

      https://contoso.com/_layouts/15/DocIdRedir.aspx?ID=xxxx

    • REST query fails if a post contains an image without any associated text. For example, you can't access a newsfeed, and you receive the following error message when you send a REST query:

      The server encountered an error processing the request. See server logs for more details.

    • Welcome email is not sent to users when the user who creates the invitation is not the owner, and no message is entered in the optional message text box.

    • When you create a document set, all entered data is lost if a field validation fails.

    • After you select Cancel on the Edit Properties page of a publishing page, you are redirected to the document library but not the page.

    • Incremental crawls on certain crawl sources cause sustained high CPU usage and gradually increasing memory consumption.

    • The WOPI Discovery Synchronization timer job is displayed as successful even if the job fails.

    • When you drag-and-drop files to a SharePoint site, the upload process may freeze after a brief period of inactivity.

    • When you restore or move a site collection to a different location, the URL of the site logo image isn't updated.

    • Custom CSS styles aren't displayed for the RichHtmlField control on ribbons.

    • After you migrate from SharePoint Server 2010 to SharePoint Server 2013, you can't access workflows of a list to start a new workflow or check the status of existing instances for SharePoint Server 2010 workflows.

    • When you try to access a list for which you don't have access permissions, you expect to receive an access denied error message. Instead, you receive the following error message:

      The "ListViewWebPart" Web Part appears to be causing a problem. Object reference not set to an instance of an object.


    • After you restore or copy a site collection, the URL of the navigation node is invalid.

    • After you use the Copy-SPSite cmdlet to synchronize a newly created site collection, you can't use OneDrive for Business to synchronize an old site collection.

      Note To resolve this issue, you also have to apply September 16, 2014 update for OneDrive for Business (KB2889931).

    • You cannot attach any files to list items in a SharePoint Server 2013 site. The operation fails, and you receive with a message that states that the path contains invalid characters.

    • After you move a chart from a worksheet to another worksheet in Excel 2010, alternative title and description are blank.

    • Hyperlinks that are created to local files in Visio 2010 don't work when the files are published to SharePoint.


More Information

The 2007 Microsoft Office system (all editions) and other softwareReference Table

The following table contains the security update information for this software.

Security update file name

For Excel 2007 Service Pack 3:
excel2007-kb3085615-fullfile-x86-glb.exe

For Visio 2007 Service Pack 3:
visio2007-kb3085542-fullfile-x86-glb.exe

For Microsoft Excel Viewer:
xlview2007-kb3085619-fullfile-x86-glb.exe

For Microsoft Office Compatibility Pack
xlconv2007-kb3085618-fullfile-x86-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update requires a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base Article 3085615
See Microsoft Knowledge Base Article 3085542
See Microsoft Knowledge Base Article 3085619
See Microsoft Knowledge Base Article 3085618

Registry key verification

Not applicable

Microsoft Office 2010 (all editions)Reference Table

The following table contains the security update information for this software.

Security update file name

For Microsoft Excel 2010 Service Pack 2 (32-bit editions)
excel2010-kb3085609-fullfile-x86-glb.exe

For Microsoft Excel 2010 Service Pack 2 (64-bit editions)
excel2010-kb3085609-fullfile-x64-glb.exe

For Microsoft Visio 2010 Service Pack 2 (32-bit editions):
visio2010-kb3085514-fullfile-x86-glb.exe

For Microsoft Visio 2010 Service Pack 2 (64-bit editions):
visio2010-kb3085514-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update requires a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base Article 3085609
See Microsoft Knowledge Base Article 3085514

Registry key verification

Not applicable

Microsoft Office 2013 (all editions)Reference Table

The following table contains the security update information for this software.

Security update file name

For supported editions of Microsoft Excel 2013 (32-bit editions):
excel2013-kb3085583-fullfile-x86-glb.exe

For supported editions of Microsoft Office 2013 (64-bit editions):
excel2013-kb3085583-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update requires a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base Article 3085583

Registry key verification

Not applicable

Microsoft Office 2013 RT (all editions)Reference Table

The following table contains the security update information for this software.

Deployment

The 3085583 update for Microsoft Excel 2013 RT is available through Windows Update.

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update requires a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Click Control Panel, click System and Security, and then click Windows Update. Under See also, click Installed updates, and then select from the list of updates.

File information

See Microsoft Knowledge Base Article 3085583

Microsoft Office 2016 (all editions)Reference Table

The following table contains the security update information for this software.

Security update file name

For supported editions of Microsoft Excel 2016 (32-bit editions):
excel2016-kb2920693-fullfile-x86-glb.exe

For supported editions of Microsoft Excel 2016 (64-bit editions):
excel2016-kb2920693-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update requires a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base Article 2920693

Registry key verification

Not applicable

Office for Mac 2011Prerequisites

  • Mac OS X version 10.5.8 or later version on an Intel processor

  • Mac OS X user accounts must have administrator privileges to install this security update

Install the update

Download and install the appropriate language version of the Microsoft Office for Mac 2011 14.5.7 Update from the Microsoft Download Center.

  1. Close all applications, including virus-protection applications and all Microsoft Office applications, because they could interfere with the installation.

  2. Open the Microsoft Office for Mac 2011 14.5.7 Update volume on your desktop. This step might have been performed for you.

  3. To start the update process, in the Microsoft Office for Mac 2011 14.5.7 Update volume window, double-click the Microsoft Office for Mac 2011 14.5.7 Update application, and follow the instructions.

  4. When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see the "Verify update installation" section. To remove the update installer, first drag the Microsoft Office for Mac 2011 14.5.7 Update volume to the Trash, and then drag the file that you downloaded to the Trash.


Verify update installation

To verify that a security update is installed on an affected system, follow these steps:

  1. In Finder, locate the Application Folder (Microsoft Office 2011).

  2. Select Word, Excel, PowerPoint, or Outlook and start the application.

  3. On the application menu, click About Application_Name (where Application_Name is Word, Excel, PowerPoint, or Outlook). If the Latest Installed Update Version number is 14.5.7, the update was successfully installed.

Restart requirement

This update does not require you to restart your computer.

Remove the update

This security update cannot be uninstalled.

Moreinformation

If you have technical questions or problems downloading or using this update, see Microsoft for Mac Support to learn about the support options that are available to you.

Office 2016 for Mac prerequisites

  • Mac OS X Yosemite 10.10 or later version on an Intel processor

  • A valid Microsoft Office 365 subscription.

Install the update

Download and install the appropriate language version of the Microsoft Office 2016 for Mac 15.15.0 Update from the Microsoft Download Center.

  1. Close all applications, including virus-protection applications and all Microsoft Office applications, because they could interfere with the installation.

  2. Open the Microsoft Office 2016 for Mac 15.15.0 Update volume on your desktop. This step might have been performed for you.

  3. To start the update process, in the Microsoft Office 2016 for Mac 15.15.0 Update volume window, double-click the Microsoft Office 2016 for Mac 15.15.0 Update application, and follow the instructions.

  4. When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see the "Verify update installation" section. To remove the update installer, first drag the Microsoft Office 2016 for Mac 15.15.0 Update volume to the Trash, and then drag the file that you downloaded to the Trash.


Verify update installation

To verify that a security update is installed on an affected system, follow these steps:

  1. In Finder, locate the Application Folder (Microsoft Office 2016).

  2. Select Word, Excel, PowerPoint, or Outlook and start the application.

  3. On the application menu, click About Application_Name (where Application_Name is Word, Excel, PowerPoint, or Outlook). If the Latest Installed Update Version number is 15.15.0, the update was successfully installed.


Restart requirement

This update does not require you to restart your computer.

Remove the update

This security update cannot be uninstalled.

More information

If you have technical questions or problems downloading or using this update, see Microsoft for Mac Support to learn about the support options that are available to you.


Microsoft Office SharePoint Server 2007 (all editions) and Windows SharePoint Services 3.0 (all versions)Reference Table

The following table contains the security update information for this software.

Security update file name

For SharePoint Server 2007 Service Pack 3 (32-bit editions):
ifswfe2007-kb2596670-fullfile-x86-glb.exe

For SharePoint Server 2007 Service Pack 3 (64-bit editions):
ifswfe2007-kb2596670-fullfile-x64-glb.exe

For Excel Services on SharePoint Server 2007 Service Pack 3 (32-bit editions):
xlsrvapp2007-kb3054994-fullfile-x86-glb.exe

For Excel Services on SharePoint Server 2007 Service Pack 3 (64-bit editions):
xlsrvapp2007-kb3054994-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

This security update cannot be removed.

File Information

See Microsoft Knowledge Base Article 2596670
See Microsoft Knowledge Base Article 3054994

Registry key verification

Not applicable

Microsoft SharePoint Server 2010 (all editions) and SharePoint Foundation 2010 (all versions)Reference Table

The following table contains the security update information for this software.

Security update file name

For Microsoft SharePoint Server 2010 Service Pack 2:
ifsloc2010-kb2553405-fullfile-x64-glb.exe

For Excel Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:
xlsrv2010-kb3085596-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

This security update cannot be removed.

File Information

See Microsoft Knowledge Base Article 2553405
See Microsoft Knowledge Base Article 3085596

Registry key verification

Not applicable

Microsoft SharePoint Server 2013 (all editions) and SharePoint Foundation 2013 (all versions)Reference Table

The following table contains the security update information for this software.

Security update file name

For supported editions of Microsoft SharePoint Server 2013:
coreserverloc2013-kb3085567-fullfile-x64-glb.exe

For supported editions of Microsoft SharePoint Foundation 2013:
sts2013-kb3085582-fullfile-x64-glb.exe

For Excel Services on supported editions of Microsoft SharePoint Server 2013:
xlsrvloc2013-kb3085568-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

This security update cannot be removed.

File Information

See Microsoft Knowledge Base Article 3085567
See Microsoft Knowledge Base Article 3085582
See Microsoft Knowledge Base Article 3085568

Registry key verification

Not applicable

Microsoft Office Web Apps 2010 (all versions)Reference Table

The following table contains the security update information for this software.

Security update file name

For Microsoft Web App 2010 Service Pack 2:
wac2010-kb3085520-fullfile-x64-glb.exe

For Microsoft Excel Web App 2010 Service Pack 2:
xlwac2010-kb3085595-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

This security update cannot be removed.

File Information

See Microsoft Knowledge Base Article 3085520
See Microsoft Knowledge Base Article 3085595

Registry key verification

Not applicable

Microsoft Office Web Apps 2013 (all versions)Reference Table

The following table contains the security update information for this software.

Security update file name

For Microsoft Office Web Apps Server 2013 Service Pack 1:
wacserver2013-kb3085571-fullfile-x64-glb.exe 2

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, you receive a message that advises you to restart.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

This security update cannot be removed.

File Information

See Microsoft Knowledge Base Article 3085571

Registry key verification

Not applicable


Package Name

Package Hash SHA 1

Package Hash SHA 2

coreserverloc2013-kb3085567-fullfile-x64-glb.exe

5D6B0547C7E8823E0ACBEBE266D34F7844D1059B

54EA4A4D2708C3A17E6FC058441E31DE4BA7E597E64008FE3B25744F43681E0B

excel2007-kb3085615-fullfile-x86-glb.exe

944954A3CBA30582DD37BBD43BF0310F6387694D

EAAAD9C255247B5E82B5E5779F2C569C3A995B3645BC53BC70ACC3A26BB3793D

excel2010-kb3085609-fullfile-x64-glb.exe

896187F57ECA98F9135C0DED848BCC54109950B7

B04F7C7E9A766A805EFE1ABF10042163A9D24B23D7FDBFD23891EAAFBA21B3DF

excel2010-kb3085609-fullfile-x86-glb.exe

4D0FB46A6E8D163E207E3E9E1DB4699986B9F17E

309727C148BB2FA16DF01787D7E32AD59C40FDC27D1DAEE88B176CF652BFD7EB

excel2013-kb3085583-fullfile-x64-glb.exe

051F9AB96AB5AD3711E91BD0263408D76240A839

CA8A87EC4F2E274E0F58BF426E25A9CAC199621C1BAE46FABD7EFCBDE918F1D0

excel2013-kb3085583-fullfile-x86-glb.exe

A57E20F9C39DD594DF910E3FCDD4E1E26EEE8F18

CFACDD83E9656D84009036C032AB24444AABD21581E420AF01C18E3BDD4C9AD3

excel2016-kb2920693-fullfile-x64-glb.exe

B313D67952EA0191FCDF7F1F39D339558CA698BC

465D7910EFBD7EC08BFCCC4AFF925778DBED21627E61B49F2196649BCCED61C0

excel2016-kb2920693-fullfile-x86-glb.exe

F11BE779EFC3CC96EEB4E6A8DE180BBC8061125E

1F00A556D06CFC76CB9D38D9EE1825E7342BA4F44D79FAF735562E1DE002DD54

ifsloc2010-kb2553405-fullfile-x64-glb.exe

5B432F4596F1355AF74C79B2934CC5686E7D114C

5D33A252DE23DA3E0FE275E146FFED3367F1DAE68CC6E3A704D3925F1F46D21A

ifswfe2007-kb2596670-fullfile-x64-glb.exe

AD12BC1556F191A92D951F621941B8149825EEB2

117CCB38765D7F1E30F23634CF7831164156A78488CDCF31026674133FF85C38

ifswfe2007-kb2596670-fullfile-x86-glb.exe

D8958AA8C4C4369B30B8E3C137CC5449ADF7B923

89871A00EC35ADB4052BDE92E9433462018F45ABF98C0067FFC2CFEAA91F6B6D

mso2007-kb3085544-fullfile-x86-glb.exe

0ED79E945CC3E9A60E0BAEEE5844398DCC37C3F6

BFE7946057E84295B144002B2072A7F2ADE5BA5FEF4845D7E7E869FB29A38650

sts2013-kb3085582-fullfile-x64-glb.exe

8A67993C15550B3081449D867D954ABA45F3988B

733E15B22F502351F60357D3DD1D286A9297EF5A2F46E2AD37CE61A29A5A9B1F

visio2007-kb3085542-fullfile-x86-glb.exe

AF9BD898E6FDC45B11592D7881BC3A793A20F824

5B0FACBE2AE4B9ED764007A9938285A41A226BBDFD378D8417F668F6BD8EFEE1

visio2010-kb3085514-fullfile-x64-glb.exe

1067520B0EB485CDB11897C2196359A4811A5600

4F0F72376A2E0B2F5120A5B0472D9C1C82EB17342E46D21D90B42EA1EABBDCFE

visio2010-kb3085514-fullfile-x86-glb.exe

658CD7D7D20F85479240754B0CA3F6D2EF717B7A

3C93D9CD016BD1A96D10997F63F07B5189EAA6D12BF9F81451296305CB2B7796

wac2010-kb3085520-fullfile-x64-glb.exe

D49F5ED2DAC7E3DD696B2232116E06E5B1D28C34

F08C21AA2C0043AEADDB886F8DFF3240ABD86EF1DB1CB747540CE468A8BFA590

wacserver2013-kb3085571-fullfile-x64-glb.exe

EE85C53FD94AA1885D442EEB385CF0E46C1561FA

1BECE166A7A21862DECC196A0FCC428872BA6B85FE7ABB0BA4B865E921244C56

xlconv2007-kb3085618-fullfile-x86-glb.exe

FBB08BC0948608B19B9B9DBE789C73EE13F2D8A1

F71A504A87D5A88C6B43E1949B0C9EFBDA2E2DF6121A4F6D133BD09ECF7A81B5

xlsrv2010-kb3085596-fullfile-x64-glb.exe

AAF20E08FC5B3D8C3963B65702D4A80FBAC66B62

B053DA54A046D43AE35DFFA653F004FE3FC92F8AD284A14060F22A0649F4B760

xlsrvapp2007-kb3054994-fullfile-x64-glb.exe

77D7B998D4B3D4D7A9B31C3085CEB9E5378200BB

A6F37A8E0844063E12E15CFC360DDCDED0863DDE29123CACBC094C8CDA5C8781

xlsrvapp2007-kb3054994-fullfile-x86-glb.exe

7B24F1672FD1CC18EA3AFE56DCF7EE8D763DC9C0

9F45D582B13D39A98327D74197B657781B2980A5A5C1BC03687FE1586272A42F

xlsrvloc2013-kb3085568-fullfile-x64-glb.exe

8DACBE09802F0895F0E136775C73CAFBF895781B

5161E4FEABE3727105887511AE6525EEADBCE83617922B3F1C51B5981F2A5347

xlview2007-kb3085619-fullfile-x86-glb.exe

9150099055DCCC8268DE2A53441E3DCDBD94398E

E133001F9E70C54653FA893D4C72D3ADFFFB823E4CCB5DACDA29327A0B31842F

xlwac2010-kb3085595-fullfile-x64-glb.exe

6701AB350199A857B3D832A3F0D54FF0092DAD09

D8CB5969384CBE2CB3C2CC82BF1907AEE33A1613819BF495156BCF45EE48EA9A


Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×