MS15-116: Description of the security update for OneNote 2016: November 10, 2015

Applies to: OneNote 2016


This security update resolves vulnerabilities in Microsoft OneNote 2016 that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS15-116.

Note To apply this security update, you must have the release version of OneNote 2016 installed on the computer. After you apply this security update, you may see a popup window that states that a website wants to open web content in protected mode in Internet Explorer. See Updates to change the way that Internet Explorer interacts with features in Microsoft Office applications for more information.

For a complete list of affected versions of Microsoft Office software, see KB3104540.

Improvements and fixes

This security update contains fixes for the following nonsecurity issues:
  • When you paste content from Word 2016 or Outlook 2016 by using the Keep Text Only or Keep Source Formatting paste option in OneNote 2016, the pasted content is blank.
  • When you record a video in OneNote 2016 on a Microsoft Surface Pro 3, the preview window is blank.
  • When you print to OneNote 2016 by using the Send To OneNote 2016 printer, the printout is displayed as a red X in other versions of OneNote.

How to obtain and install the update

Method 1: Microsoft Update

This security update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this security update, see Microsoft Knowledge Base article 3104540.

Update replacement information

This security update doesn't replace a previously released update.