MS15-116: Description of the security update for Excel 2016: November 10, 2015

Applies to: Excel 2016


This security update resolves vulnerabilities in Excel 2016 that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS15-116.

Note To apply this security update, you must have the release version of Excel 2016 installed on the computer. After you apply this security update, you may see a popup window that states that a website wants to open web content in protected mode in Internet Explorer. See Updates to change the way that Internet Explorer interacts with features in Microsoft Office applications for more information.

For a complete list of affected versions of Microsoft Office software, see Microsoft Knowledge Base article 3104540.

Improvements and fixes

This security update contains improvements and fixes for the following nonsecurity issues:
  • Charts can't be inserted in other Office applications such as Microsoft Word or Microsoft PowerPoint if an add-in from a network location is loaded in Excel 2016.
  • If a workbook contains embedded charts of other applications, Excel 2016 may crash.
  • When you rename a worksheet name in Excel 2016 in high contrast mode, you can't see the name until the rename is complete.
  • Some issues occur that are related to the import and transformation features in the Get & Transform section of the Data tab in Excel 2016. See article 3108701 for more information.
  • An image of a chart or a bounding box that has a message is displayed instead of the chart itself in Office 2016 applications.
  • Adds the insert picture API to Office Add-ins for Word 2016, Excel 2016, and PowerPoint 2016 applications.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 3104540.

Update replacement information

This update replaces previously released security update 2920693.