Description of the security update for Excel 2016: November 13, 2018

Applies to: Excel 2016

Summary


This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2018-8574 and Microsoft Common Vulnerabilities and Exposures CVE-2018-8577.
 
Note To apply this security update, you must have the release version of Microsoft Excel 2016 installed on the computer.
 

Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer (.msi)-based edition of Office 2016. It doesn't apply to the Office 2016 Click-to-Run editions, such as Microsoft Office 365 Home (see Determining your Office version).

Improvements and fixes


This security update contains improvements and fixes for the following nonsecurity issues:
  • When you right-click the Excel icon in the taskbar and select Close all windows, Excel 2016 crashes sometimes.
  • When you save a workbook that contains external references to cells that contain metadata from another workbook, for example, a rich data type value, Excel 2016 crashes.
  • When you programmatically copy a very hidden sheet to a new workbook by using the Worksheet.Copy method, Excel 2016 crashes.
  • This update adds the translation for the Ctrl shortcut key in the Record Macro dialog in the German version.
  • Assume that a workbook contains merged cells. When you hide, filter, or outline rows in the workbook, Excel 2016 may freeze.
     

How to get and install the update


Method 1: Microsoft Update
 
This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.
 
Method 2: Microsoft Update Catalog
 
To get the stand-alone package for this update, go to the Microsoft Update Catalog website.
 
Method 3: Microsoft Download Center
 
You can get the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.
 

More Information


Security update deployment information

For deployment information about this update, see security update deployment information: November 13, 2018.

Security update replacement information

This security update replaces previously released security update KB 4461448.

File hash information
 
File name SHA1 hash SHA256 hash
excel2016-kb4461503-fullfile-x86-glb.exe 650027CE003CE2E17282A75642355A0D5309274A A8C9E58C32FDC132F4FFB6A7606641F66976BCAA7FDE9D18F693ABD42763CD2D
excel2016-kb4461503-fullfile-x64-glb.exe DDEA92240B5AF551A3B8640B793D8AFB6947FC7C 046D8DA7A25B423C3F83B0AC1A704040AC23DE1F4493F846AAF826D0B0BF371E
 
File information

The English (United States) version of this software update installs files that have the attributes that are listed in the following tables. The dates and times for these files are listed in Coordinated Universal Time (UTC). The dates and times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and times may change when you perform certain operations on the files.
 

How to get help and support for this security update


Protect yourself online and at home: Windows Security support
 
Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure
 
Local support according to your country: International Support