MS16-133: Description of the security update for Excel 2016: November 8, 2016

Applies to: Excel 2016


This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-133.

Note To apply this security update, you must have the release version of Microsoft Excel 2016 installed on the computer.

For a complete list of affected versions of Microsoft Office software, see Microsoft Knowledge Base article 3199168.

Improvements and fixes

This security update contains improvements and fixes for the following nonsecurity issues:

  • Added some new Get & Transform features in Excel 2016. For more information, see 3127896.
  • When you try to get data from a Microsoft Access database by using Access queries that reference linked ODBC tables, and the tables require a user name and password, you receive the following error message: The query did not run or the database could not be opened. Check the database server or contact your database administrator. Make sure the external database is available and hasn't been moved or reorganized, then try the operation again." This issue occurs in the 64-bit version of Microsoft Excel 2016.
  • After you run the document inspection for a workbook in Excel 2016, PivotTable refresh operations may be broken.
  • GDI object leak occurs in the Find and Replace dialog box.
  • Some network calls to older version of Microsoft SharePoint Server no longer occur.
  • When you load certain workbook files that contain blank strings in an external cell table in Excel 2016, Excel 2016 crashes.
  • When you load certain Workbook files that contain blank strings in an external cell table in Excel 2016, Excel may calculate an incorrect value in a linked cell until the links are updated again.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see the "Turn on automatic updating in Control Panel" section of this Safety & Security Center article.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 3199168.

Security update replacement information

This security update replaces previously released security update 3118290.

File hash information

Package namePackage hash SHA 1Package hash SHA 2