MS16-133: Security Update for Microsoft Office: November 8, 2016

Summary

This security update resolves a vulnerability in Microsoft Office. To learn more about the vulnerability, see Microsoft Security Bulletin MS16-133.

More information about this security update

The following articles contain more information about this security update as it relates to individual product versions. These articles may contain known issue information.

Nonsecurity-related fixes and improvements that are included in this security update



  • Improve backward compatibility in charts between Microsoft Word 2013 and 2016.

  • Add some new Get & Transform features in Microsoft Excel 2016. See 3127896 for more information.

  • Translate some terms in multiple languages to make sure that the meaning is accurate.

  • Contains fixes for the following nonsecurity issues:

    • When you paste large content to a document in Word 2013, Word may freeze.

    • The Office.context.mailbox.item.body.getAsync API method doesn't return multibyte UTF-8 characters in Microsoft Outlook 2013.

    • The Range.Revisions property returns all documents' revisions not just those for the selected documents.

    • After the TableBinding object is added on matrix in Microsoft Excel 2013, Excel crashes if the source was already bound and converted to matrix.

    • When you switch to other windows while a slicer operation is in progress in Excel 2013, Excel may crash.

    • When you try to get data from a Microsoft Access database by using Access queries that reference linked ODBC tables that require user name and password, you receive the error message, "The query did not run or the database could not be opened. Check the database server or contact your database administrator. Make sure the external database is available and hasn't been moved or reorganized, then try the operation again." This issue occurs in the 64-bit version of Excel 2016.

    • After you run the document inspection for a workbook in Excel 2016, PivotTable refresh operations may be broken.

    • GDI object leak in the Find and Replace dialog box.

    • Some network calls to old versions of Microsoft SharePoint Server no longer occur.

    • When you load certain .xlsl files that contain blank strings in an external celltable in Excel 2016, Excel may crash.

More Information



Microsoft Office 2007 (all editions) and other softwareReference table

The following table contains the security update information for this software.

Security update file name

For Microsoft Word 2007:
word2007-kb3127949-fullfile-x86-glb.exe


For Microsoft Excel 2007 Service Pack 3:
excel2007-kb3118395-fullfile-x86-glb.exe


For Microsoft Office Compatibility Pack Service Pack 3:
xlconv2007-kb3127889-fullfile-x86-glb.exe


For Microsoft Office Compatibility Pack Service Pack 3:
wordconv2007-kb3127948-fullfile-x86-glb.exe


For Microsoft Excel Viewer:
xlview2007-kb3127893-fullfile-x86-glb.exe


For Microsoft Word Viewer:
office-kb3127962-fullfile-enu.exe

For 2007 Microsoft Office Suite:
vbe62007-kb2986253-fullfile-x86-glb.exe

For 2007 Microsoft Office Suite:
mso2007-kb3118396-fullfile-x86-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base Article 3118395
See Microsoft Knowledge Base Article 3127949
See Microsoft Knowledge Base Article 3127889
See Microsoft Knowledge Base Article 3127948
See Microsoft Knowledge Base Article 3127893
See Microsoft Knowledge Base Article 3118396
See Microsoft Knowledge Base Article 2986253
See Microsoft Knowledge Base Article 3127962

Registry key verification

Not applicable

Microsoft Office 2010 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name

For Microsoft Office 2010 Service Pack 2 (32-bit editions):
kb24286772010-kb3127951-fullfile-x86-glb.exe


For Microsoft Office 2010 Service Pack 2 (64-bit editions):
kb24286772010-kb3127951-fullfile-x64-glb.exe

For Microsoft Office 2010 Service Pack 2 (32-bit editions):
vbe72010-kb3115120-fullfile-x86-glb.exe

For Microsoft Office 2010 Service Pack 2 (64-bit editions):
vbe72010-kb3115120-fullfile-x86-glb.exe


For Microsoft Excel 2010 Service Pack 2 (32-bit editions):
excel2010-kb3118390-fullfile-x86-glb.exe


For Microsoft Excel 2010 Service Pack 2 (64-bit editions)
excel2010-kb3118390-fullfile-x64-glb.exe


For Microsoft Word 2010 Service Pack 2 (32-bit editions):
word2010-kb3127953-fullfile-x86-glb.exe


For Microsoft Word 2010 Service Pack 2 (64-bit editions)
word2010-kb3127953-fullfile-x64-glb.exe


For Microsoft PowerPoint 2010 Service Pack 2 (32-bit editions):
powerpoint2010-kb3118378-fullfile-x86-glb.exe


For Microsoft PowerPoint 2010 Service Pack 2 (64-bit editions)
powerpoint2010-kb3118378-fullfile-x64-glb.exe


For Microsoft PowerPoint Viewer:
pptview2010-kb3118382-fullfile-x86-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base Article 3127951
See Microsoft Knowledge Base Article 3115120
See Microsoft Knowledge Base Article 3118390
See Microsoft Knowledge Base Article 3127953
See Microsoft Knowledge Base Article 3118378
See Microsoft Knowledge Base Article 3118382

Registry key verification

Not applicable

Microsoft Office 2013 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name

For Microsoft Office 2013 Service Pack 1 (32-bit editions)
vbe72013-kb3115153-fullfile-x86-glb.exe


For Microsoft Office 2013 Service Pack 1 (64-bit editions)
vbe72013-kb3115153-fullfile-x64-glb.exe


For Microsoft Excel 2013 Service Pack 1 (32-bit editions)
excel2013-kb3127921-fullfile-x86-glb.exe


For Microsoft Excel 2013 Service Pack 1 (64-bit editions)
excel2013-kb3127921-fullfile-x86-glb.exe


For Microsoft Word 2013 Service Pack 1 (32-bit editions):
word2013-kb3127932-fullfile-x86-glb.exe


For Microsoft Word 2013 Service Pack 1 (64-bit editions)
word2013-kb3127932-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base Article 3115153
See Microsoft Knowledge Base Article 3127921
See Microsoft Knowledge Base Article 3127932

Registry key verification

Not applicable

Microsoft Office 2013 RT (all editions)

Deployment

The 3127921, 3115153, 3127932 updates for Microsoft Office 2013 RT and its components are available via Windows Update.

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Click Control Panel, click System and Security, click Windows Update, and then under See also, click Installed updates and select from the list of updates.

File information

See Microsoft Knowledge Base Article 3115153
See Microsoft Knowledge Base Article 3127921
See Microsoft Knowledge Base Article 3127932

Microsoft Office 2016 (all editions)Reference table

The following table contains the security update information for this software.

Security update file name

For Microsoft Word 2016 (32-bit edition)
vbe72016-kb3115135-fullfile-x86-glb.exe


For Microsoft Word 2016 (64-bit edition)
vbe72016-kb3115135-fullfile-x64-glb.exe


For Microsoft Excel 2016 (32-bit edition)
excel2016-kb3127904-fullfile-x86-glb.exe


For Microsoft Excel 2016 (64-bit edition)
excel2016-kb3127904-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

Use Add or Remove Programs item in Control Panel.

File information

See Microsoft Knowledge Base Article 3115135
See Microsoft Knowledge Base Article 3127904

Registry key verification

Not applicable

Microsoft SharePoint Server 2010 (all editions)

Reference tableThe following table contains the security update information for this software.

Security update file name

For Word Automation Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:
wdsrv2010-kb3127950-fullfile-x64-glb.exe
For Excel Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:
xlsrv2010-kb3118381-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base article 912203

Restart requirement

After you install this security update on all SharePoint servers, you must run the PSconfig tool to complete the installation process. You may have to restart the computer after you install this security update. In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer.

To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update.
See Why you may be prompted to restart your computer after you install a security update on a Windows-based computer for more information.

Removal information

This security update cannot be removed.

File Information

See Microsoft Knowledge Base article 3127950
See Microsoft Knowledge Base article 3118381

Registry key verification

Not applicable

Microsoft SharePoint Server 2013 (all editions)Reference table

The following table contains the security update information for this software.


Security update file name

For Word Automation Services on supported editions of Microsoft SharePoint Server 2013 Service Pack 2:
wdsrvloc2013-kb3127927-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base article 887012.

Removal information

This security update cannot be removed.

File Information

See Microsoft Knowledge Base article 3127927

Registry key verification

Not applicable

Microsoft Office Web Apps 2010 (all versions)Reference table

The following table contains the security update information for this software.

Security update file name

For Microsoft Office Web Apps 2010 Service Pack 2:
wac2010-kb3127954-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

This security update cannot be removed.

File Information

See Microsoft Knowledge Base Article 3127954

Registry key verification

Not applicable

Microsoft Office Web Apps 2013 (all versions)Reference table

The following table contains the security update information for this software.

Security update file name

For all supported editions of Microsoft Office Web Apps Server 2013 Service Pack 2:
wacserver2013-kb3127929-fullfile-x64-glb.exe

Installation switches

See Microsoft Knowledge Base Article 912203

Restart requirement

In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart.

To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see Microsoft Knowledge Base Article 887012.

Removal information

This security update cannot be removed.

File Information

See Microsoft Knowledge Base Article 3127929

Registry key verification

Not applicable

Office for Mac 2016Reference table

The following table contains the security update information for this software.

Requirements

To install this update, you must be running OS X Yosemite 10.10 or a later version.

Previous Versions

If you already have Office for Mac 2011 installed, you can run Office for Mac 2011 and Office 2016 for Mac side-by-side. If you want to remove Office for Mac 2011, see Uninstall Office 2011 for Mac.

Installation

This update is available from Microsoft AutoUpdate. AutoUpdate is provided together with Office. It automatically keeps Microsoft software up-to-date. To use AutoUpdate, start a Microsoft Office program, and then click Check for Updates on the Help menu.

Office for Mac 2011Reference table

The following table contains the security update information for this software.


Requirements

Office for Mac 2011 14.1.0 or a later version installed on your computer. Also, make sure that the computer is running Mac OS X 10.5.8 or a later version of the Mac OS X operating system.

To verify that the computer meets this prerequisite, click About This Mac on the Apple menu.

To verify that Office for Mac 2011 14.1.0 is installed on your computer, follow these steps:
On the Go menu, click Applications.
Open the Microsoft Office 2011 folder, and then start any Office application. (For example, start Microsoft Word).

On the application menu, click About <application>.

In the About <application> dialog box, notice the version number that is displayed. The number should be 14.1.0 or a later version.

Previous Versions

If you already have Office 2016 for Mac installed, and you do not want to receive Office for Mac 2011 updates, follow the steps in Uninstall Office 2011 for Mac to remove Office for Mac 2011.

Installation

This update is available from Microsoft AutoUpdate. AutoUpdate is provided together with Office. It automatically keeps Microsoft software up-to-date. To use AutoUpdate, start a Microsoft Office program, and then click Check for Updates on the Help menu.


Help for installing updates: Support for Microsoft Update

Security solutions for IT professionals: TechNet Security Troubleshooting and Support

Help for protecting your Windows-based computer from viruses and malware: Virus Solution and Security Center

Local support according to your country: International Support

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×