MS15-116: Description of the security update for Office 2016: November 10, 2015

Applies to: Office Professional Plus 2016Office Professional 2016Office Professional 2016


This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Microsoft Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS15-116.

Note To apply this security update, you must have the release version of Microsoft Office 2016 installed on the computer.

For a complete list of affected versions of Microsoft Office software, see KB3104540.

Improvements and fixes

This security update contains fixes for the following nonsecurity issues:
  • Some commands on the Mini toolbar appear black.
  • Every time that you open Excel 2016, and the first time that the zoom slider level is changed, the change isn't propagated to the canvas.
  • After you use an Office 2016 application for a long time, the application doesn't update the UI and becomes unusable. This issue is because of a GDI leak that ends up hitting the 10,000 GDI object limit per process that is imposed by Windows. 

    Note This issue is observable by adding the GDI Objects columns in Task Manager.

  • Changes some key-tips to match tooltips and avoid conflicts with other key-tips on the ribbon for the Tell Me feature for multiple languages.

  • Some issues that are related to the import and transformation features in the Get & Transform section of the Data tab in Excel 2016. See article 3108701 for more information.
  • Improves the visual appearance of the Format Text Effects dialog box in the Dark Gray and Colorful themes.
  • Improves the readability of the Signatures task pane in the Dark Gray theme.

How to obtain and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 3104540.

Update replacement information

This update doesn't replace a previously released update.