MS16-133: Security Update for Microsoft Office: November 8, 2016

Applies To
Excel 2016 Office Home and Business 2016 Office Home and Business 2016 Office Home and Student 2016 Office Home and Student 2016 Office Professional 2016 Office Professional 2016 Office Professional 2016 Office Professional Plus 2016 Office Standard 2016 Excel 2013 Office 2013 SP1 SharePoint Server 2013 SP1 Word 2013 Excel 2010 Microsoft Office 2010 Service Pack 2 PowerPoint 2010 Microsoft SharePoint Server 2010 Service Pack 2 Microsoft SharePoint Server 2010 Service Pack 2 Microsoft Word 2010

Summary

This security update resolves a vulnerability in Microsoft Office. To learn more about the vulnerability, see Microsoft Security Bulletin MS16-133.

More information about this security update

The following articles contain more information about this security update as it relates to individual product versions. These articles may contain known issue information.

            
          

  • Improve backward compatibility in charts between Microsoft Word 2013 and 2016.

  • Add some new Get & Transform features in Microsoft Excel 2016. See 3127896 for more information.

  • Translate some terms in multiple languages to make sure that the meaning is accurate.

  • Contains fixes for the following nonsecurity issues:

    • When you paste large content to a document in Word 2013, Word may freeze.

    • The Office.context.mailbox.item.body.getAsync API method doesn't return multibyte UTF-8 characters in Microsoft Outlook 2013.

    • The Range.Revisions property returns all documents' revisions not just those for the selected documents.

    • After the TableBinding object is added on matrix in Microsoft Excel 2013, Excel crashes if the source was already bound and converted to matrix.

    • When you switch to other windows while a slicer operation is in progress in Excel 2013, Excel may crash.

    • When you try to get data from a Microsoft Access database by using Access queries that reference linked ODBC tables that require user name and password, you receive the error message, "The query did not run or the database could not be opened. Check the database server or contact your database administrator. Make sure the external database is available and hasn't been moved or reorganized, then try the operation again." This issue occurs in the 64-bit version of Excel 2016.

    • After you run the document inspection for a workbook in Excel 2016, PivotTable refresh operations may be broken.

    • GDI object leak in the Find and Replace dialog box.

    • Some network calls to old versions of Microsoft SharePoint Server no longer occur.

    • When you load certain .xlsl files that contain blank strings in an external celltable in Excel 2016, Excel may crash.

More Information

Security update deployment information

        
      

Microsoft Office 2007 (all editions) and other softwareReference table

The following table contains the security update information for this software.

Security update file name For Microsoft Word 2007:
word2007-kb3127949-fullfile-x86-glb.exe
For Microsoft Excel 2007 Service Pack 3:
excel2007-kb3118395-fullfile-x86-glb.exe
For Microsoft Office Compatibility Pack Service Pack 3:
xlconv2007-kb3127889-fullfile-x86-glb.exe
For Microsoft Office Compatibility Pack Service Pack 3:
wordconv2007-kb3127948-fullfile-x86-glb.exe
For Microsoft Excel Viewer:
xlview2007-kb3127893-fullfile-x86-glb.exe
For Microsoft Word Viewer:
office-kb3127962-fullfile-enu.exe
For 2007 Microsoft Office Suite:
vbe62007-kb2986253-fullfile-x86-glb.exe
For 2007 Microsoft Office Suite:
mso2007-kb3118396-fullfile-x86-glb.exe
Installation switches See Microsoft Knowledge Base Article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal information Use Add or Remove Programs item in Control Panel.
File information See Microsoft Knowledge Base Article 3118395
See Microsoft Knowledge Base Article 3127949
See Microsoft Knowledge Base Article 3127889
See Microsoft Knowledge Base Article 3127948
See Microsoft Knowledge Base Article 3127893
See Microsoft Knowledge Base Article 3118396
See Microsoft Knowledge Base Article 2986253
See Microsoft Knowledge Base Article 3127962
Registry key verification Not applicable

Microsoft Office 2010 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name For Microsoft Office 2010 Service Pack 2 (32-bit editions):
kb24286772010-kb3127951-fullfile-x86-glb.exe
For Microsoft Office 2010 Service Pack 2 (64-bit editions):
kb24286772010-kb3127951-fullfile-x64-glb.exe
For Microsoft Office 2010 Service Pack 2 (32-bit editions):
vbe72010-kb3115120-fullfile-x86-glb.exe
For Microsoft Office 2010 Service Pack 2 (64-bit editions):
vbe72010-kb3115120-fullfile-x86-glb.exe
For Microsoft Excel 2010 Service Pack 2 (32-bit editions):
excel2010-kb3118390-fullfile-x86-glb.exe
For Microsoft Excel 2010 Service Pack 2 (64-bit editions)
excel2010-kb3118390-fullfile-x64-glb.exe
For Microsoft Word 2010 Service Pack 2 (32-bit editions):
word2010-kb3127953-fullfile-x86-glb.exe
For Microsoft Word 2010 Service Pack 2 (64-bit editions)
word2010-kb3127953-fullfile-x64-glb.exe
For Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions):
powerpoint2010-kb3118378-fullfile-x86-glb.exe
For Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions)
powerpoint2010-kb3118378-fullfile-x64-glb.exe
For Microsoft PowerPoint Viewer:
pptview2010-kb3118382-fullfile-x86-glb.exe
Installation switches See Microsoft Knowledge Base Article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal information Use Add or Remove Programs item in Control Panel.
File information See Microsoft Knowledge Base Article 3127951
See Microsoft Knowledge Base Article 3115120
See Microsoft Knowledge Base Article 3118390
See Microsoft Knowledge Base Article 3127953
See Microsoft Knowledge Base Article 3118378
See Microsoft Knowledge Base Article 3118382
Registry key verification Not applicable

Microsoft Office 2013 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name For Microsoft Office 2013 Service Pack 1 (32-bit editions)
vbe72013-kb3115153-fullfile-x86-glb.exe
For Microsoft Office 2013 Service Pack 1 (64-bit editions)
vbe72013-kb3115153-fullfile-x64-glb.exe
For Microsoft Excel 2013 Service Pack 1 (32-bit editions)
excel2013-kb3127921-fullfile-x86-glb.exe
For Microsoft Excel 2013 Service Pack 1 (64-bit editions)
excel2013-kb3127921-fullfile-x86-glb.exe
For Microsoft Word 2013 Service Pack 1 (32-bit editions):
word2013-kb3127932-fullfile-x86-glb.exe
For Microsoft Word 2013 Service Pack 1 (64-bit editions)
word2013-kb3127932-fullfile-x64-glb.exe
Installation switches See Microsoft Knowledge Base Article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal information Use Add or Remove Programs item in Control Panel.
File information See Microsoft Knowledge Base Article 3115153
See Microsoft Knowledge Base Article 3127921
See Microsoft Knowledge Base Article 3127932
Registry key verification Not applicable

Microsoft Office 2013 RT (all editions)

Deployment The 3127921, 3115153, 3127932 updates for Microsoft Office 2013 RT and its components are available via Windows Update.
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal information Click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.
File information See Microsoft Knowledge Base Article 3115153
See Microsoft Knowledge Base Article 3127921
See Microsoft Knowledge Base Article 3127932

Microsoft Office 2016 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name For Microsoft Word 2016 (32-bit edition)
vbe72016-kb3115135-fullfile-x86-glb.exe
For Microsoft Word 2016 (64-bit edition)
vbe72016-kb3115135-fullfile-x64-glb.exe
For Microsoft Excel 2016 (32-bit edition)
excel2016-kb3127904-fullfile-x86-glb.exe
For Microsoft Excel 2016 (64-bit edition)
excel2016-kb3127904-fullfile-x64-glb.exe
Installation switches See Microsoft Knowledge Base Article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal information Use Add or Remove Programs item in Control Panel.
File information See Microsoft Knowledge Base Article 3115135
See Microsoft Knowledge Base Article 3127904
Registry key verification Not applicable

Microsoft SharePoint Server 2010 (all editions)

Reference tableThe following table contains the security update information for this software.

Security update file name

 For Word Automation Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:
wdsrv2010-kb3127950-fullfile-x64-glb.exe
For Excel Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:
xlsrv2010-kb3118381-fullfile-x64-glb.exe
Installation switches See Microsoft Knowledge Base article 912203
Restart requirement After you install this security update on all SharePoint servers, you must run the PSconfig tool to complete the installation process. You may have to restart the computer after you install this security update. In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.
See Why you may be prompted to restart your computer after you install a security update on a Windows-based computer for more information.
Removal information This security update cannot be removed.
File Information See Microsoft Knowledge Base article 3127950
See Microsoft Knowledge Base article 3118381
Registry key verification Not applicable

Microsoft SharePoint Server 2013 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name For Word Automation Services on supported editions of Microsoft SharePoint Server 2013 Service Pack 2:
wdsrvloc2013-kb3127927-fullfile-x64-glb.exe
Installation switches See Microsoft Knowledge Base article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.
Removal information This security update cannot be removed.
File Information See Microsoft Knowledge Base article 3127927
Registry key verification Not applicable

Microsoft Office Web Apps 2010 (all versions)Reference table

The following table contains the security update information for this software.

Security update file name For Microsoft Office Web Apps 2010 Service Pack 2:
wac2010-kb3127954-fullfile-x64-glb.exe
Installation switches See Microsoft Knowledge Base Article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal information This security update cannot be removed.
File Information See Microsoft Knowledge Base Article 3127954
Registry key verification Not applicable

Microsoft Office Web Apps 2013 (all versions)Reference table

The following table contains the security update information for this software.

Security update file name For all supported editions of Microsoft Office Web Apps Server 2013 Service Pack 2:
wacserver2013-kb3127929-fullfile-x64-glb.exe
Installation switches See Microsoft Knowledge Base Article 912203
Restart requirement In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.
Removal information This security update cannot be removed.
File Information See Microsoft Knowledge Base Article 3127929
Registry key verification Not applicable

Office for Mac 2016Reference table

The following table contains the security update information for this software.

Requirements To install this update, you must be running OS X Yosemite 10.10 or a later version.
Previous Versions If you already have Office for Mac 2011 installed, you can run Office for Mac 2011 and Office 2016 for Mac side-by-side. If you want to remove Office for Mac 2011, see Uninstall Office 2011 for Mac.
Installation This update is available from Microsoft AutoUpdate. AutoUpdate is provided together with Office. It automatically keeps Microsoft software up-to-date. To use AutoUpdate, start a Microsoft Office program, and then click Check for Updates on the Help menu.

Office for Mac 2011Reference table

The following table contains the security update information for this software.

Requirements Office for Mac 2011 14.1.0 or a later version installed on your computer. Also, make sure that the computer is running Mac OS X 10.5.8 or a later version of the Mac OS X operating system.

To verify that the computer meets this prerequisite, click About This Mac on the Apple menu.

To verify that Office for Mac 2011 14.1.0 is installed on your computer, follow these steps:
On the Go menu, click Applications.
Open the Microsoft Office 2011 folder, and then start any Office application. (For example, start Microsoft Word).

On the application menu, click About <application>.

In the About <application> dialog box, notice the version number that is displayed. The number should be 14.1.0 or a later version.
Previous Versions If you already have Office 2016 for Mac installed, and you do not want to receive Office for Mac 2011 updates, follow the steps in Uninstall Office 2011 for Mac to remove Office for Mac 2011.
Installation This update is available from Microsoft AutoUpdate. AutoUpdate is provided together with Office. It automatically keeps Microsoft software up-to-date. To use AutoUpdate, start a Microsoft Office program, and then click Check for Updates on the Help menu.

      

How to get help and support for this security update

Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support