MS16-148: Description of the security update for Office 2016: December 13, 2016

Applies to: Office Professional Plus 2016Office Professional 2016Office Standard 2016


This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-148.

Note To apply this security update, you must have the release version of Office 2016 installed on the computer.

For a complete list of affected versions of Microsoft Office software, see Microsoft Knowledge Base article 3204068.

Improvements and fixes

This security update contains improvements and fixes for the following nonsecurity issues:
  • Translate some terms into multiple languages to make sure that the meaning is accurate.
  • When you run macro code to access the XML nodes in a custom XML part in a document in Word 2016, you receive the following error message:
    Run-time error -2147467259 (80004005): Reference to undeclared namespace prefix.

  • The check in, check out, and versioning functions don't work on a closed internal network that has no Internet access. For example, when you try to check out a document, you receive the following error message: 
    Microsoft Office cannot complete the operation because the network is unavailable. Check your network connection and try again.

  • After you close a document that's open in protected view in Excel 2016, Excel 2016 crashes.
  • When you send an email message that has images in a high-DPI environment, the images are displayed in a larger size in a normal DPI environment.
  • If you have content that's protected by IRM based on an administrative template, and the administrative template is then archived, you can't do certain operations on it.

How to get and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download Center

You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

More Information

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 3204068.

Security update replacement information

This security update replaces previously released security update 3118292.

File hash information

Package namePackage hash SHA 1Package hash SHA 2