Summary

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Security Bulletin MS16-004.

Note To apply this security update, you must have the release version of Office 2016 installed on the computer.

For a complete list of affected versions of Microsoft Office software, see KB3124585.


How to obtain and install the update

Method 1: Microsoft Update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Get security updates automatically.

Method 2: Microsoft Download Center

You can obtain the stand-alone update package through the Microsoft Download Center. Follow the installation instructions on the download page to install the update.

Download Download the security update KB2920727 for 32-bit version of Office 2016

More Information

Known issues in this security update

  • After you install this security update, you have problems that affect your Access database if you use certain Windows common controls. Specifically, these problems occur if you use the controls that are associated with the MSCOMCTL.OCX file that's updated in the security update. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

    3139567 Error messages or Access crashes after you install security update MS16-004

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base Article KB3124585.

Security update replacement information

This security update doesn't replace any previously released update.

Package Name

Package Hash SHA 1

Package Hash SHA 2

mscomctlocx2016-kb2920727-fullfile-x86-glb.exe

07AA02F6EB1BB2AFDDC44CBC099554C1143712CC

4C86F09A035E89891D8195ECED019F3511B58758406A765FBF994208B0688A22


The English version of this security update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

For all supported x86-based versions of Office 2016

File identifier

File name

File version

File size

Date

Time

mscomctl.ocx

mscomctl.ocx

8-Dec-15

09:17


Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

What affected your experience?

Thank you for your feedback!

×