MS15-131: Security update for Microsoft Office to address remote code execution: December 8, 2015

Applies to: Word 2016Microsoft Office 2013 Service Pack 1Word 2013 More


This security update resolves a vulnerability in Microsoft Office. To learn more about the vulnerability, see Microsoft Security Bulletin MS15-131.

More information about this security update

The following articles contain more information about this security update as it relates to individual product versions. The articles may contain known issue information.

Nonsecurity-related fixes and improvements that are included in this security update

  • This security update adds support for Mail Apps API requirement set 1.3 to Outlook 2013.

    Note To apply this update, install this security update together with December 8, 2015, update for Outlook 2013 (KB3114358). See KB3085636 for more information.
  • Renames the "Add-Ins" string to the "Add-ins" string for consistency.
  • This security update also contains fixes for the following nonsecurity issues:
    • When there is more than one ActiveX (OCX) object in a document in Word 2013, an infinite scroll occurs between objects. This issue occurs after you apply MS15-022: Description of the security update for Word 2013: March 10, 2015 (KB2956163).
    • When you use a printer to print a document, and then you change to another printer programmatically in Word 2013, Word 2013 may crash.
    • When you reopen a drawing that contains a Word object in Visio 2016, the Word object that is displayed as an icon doesn't appear. If you press Ctrl+A to select all shapes in the document to locate the Word object and then try to change the icon in the Convert dialog box, you receive the following error message:
      An error (1424) occurred during the action Convert Object.
      The object is empty.

    • When you press the F9 key repeatedly to update a nested field (an IF field that has a condition for a Caps switch) in Word 2016, the result of the field calculation that is displayed toggles between the condition in which all letters are capitalized and the condition in which the first letter is a capital.
    • The ContentControlOnExitevent isn't triggered when you edit a content control in the document body and then click into the header of a document in Word 2016.

    • After you enable the Track Changes function in Word 2016, deleted text is tracked for reviewers that have the same user name.
    • Assume that you have a document that has footnotes and both manual and automatic page breaks in Word 2016. You set the Numbering to Restart each page in the Footnote and Endnote dialog box. When you print a document in the background, footnote numbers in the printout are numbered consecutively instead of being restarted on each page.
    • Some text about document upload errors and digital signatures are unreadable on the Backstage in Word 2016 that uses the Dark Gray theme.
    • HTML tables aren't displayed correctly in documents in Word 2016.
    • When you use add-ins API to set content control text in a co-authoring session in Word 2016, Word 2016 may crash.
    • If a range only contains the close tag of a content control, the Range.ContentControls property doesn't collect the content control.
    • Translates some terms in multiple languages to make sure of accurate meaning.

More Information