Lucene search

K
mskbMicrosoftKB3155544
HistoryMay 10, 2016 - 12:00 a.m.

MS16-054: Security update for Office: May 10, 2016

2016-05-1000:00:00
Microsoft
support.microsoft.com
20

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.7 High

EPSS

Percentile

98.0%

<html><body><p>Describes a security update that fixes vulnerabilities in Microsoft Office. The most severe of these vulnerabilities could allow remote code execution if a user opens a specially crafted Microsoft Office file.</p><h2>Summary</h2><div>This security update resolves a vulnerability in Microsoft Office. To learn more about the vulnerability, see <a href=“https://technet.microsoft.com/library/security/ms16-054” target=“_self”>Microsoft Security Bulletin MS16-054</a>. <span></span><br /></div><h2>More information about this security update</h2><div>The following articles contain more information about this security update as it relates to individual product versions. These articles may contain known issue information. <br /><br /><ul><li><a href=“https://support.microsoft.com/help/3115465” target=“_self”>KB3115465 MS16-099: MS16-054: Description of the security update for Word 2007: August 9, 2016</a></li><li><a href=“https://support.microsoft.com/help/3114893” target=“_self”>KB3114893 MS16-099: MS16-054: Description of the security update for 2007 Microsoft Office Suite: August 9, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115480” target=“_self”>KB3115480 MS16-099: MS16-054: Description of the security update for Word Viewer: August 9, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115479” target=“_self”>KB3115479 MS16-099: MS16-054: Description of the security update for Word Viewer: August 9, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115464” target=“_self”>KB3115464 MS16-054: Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: August 9, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115025” target=“_self”>KB3115025 MS16-054: Description of the security update for Word 2013: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115016” target=“_self”>KB3115016 MS16-054: Description of the security update for Office 2013: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115094” target=“_self”>KB3115094 MS16-054: Description of the security update for Word 2016: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115103” target=“_self”>KB3115103 MS16-054: Description of the security update for Office 2016: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3054984” target=“_self”>KB3054984 MS16-054: Description of the security update for Office 2010: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3101520” target=“_self”>KB3101520 MS16-054: Description of the security update for Office 2010: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115117” target=“_self”>KB3115117 MS16-054: Description of the security update for Word Automation Services on SharePoint Server 2010: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115121” target=“_self”>KB3115121 MS16-054: Description of the security update for Office 2010: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115123” target=“_self”>KB3115123 MS16-054: Description of the security update for Word 2010: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115124” target=“_self”>KB3115124 MS16-054: Description of the security update for SharePoint Server 2010 Office Web Apps: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/2984938” target=“_self”>KB2984938 MS16-054: Description of the security update for 2007 Microsoft Office Suite: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/2984943” target=“_self”>KB2984943 MS16-054: Description of the security update for 2007 Microsoft Office Suite: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115115” target=“_self”>KB3115115 MS16-054: Description of the security update for Microsoft Office Compatibility Pack Service Pack 3: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115116” target=“_self”>KB3115116 MS16-054: Description of the security update for Word 2007: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3115132” target=“_self”>KB3115132 MS16-054: Description of the security update for Word Viewer: May 10, 2016</a></li><li><a href=“https://support.microsoft.com/help/3155776” target=“_self”>KB3155776 MS16-054: Description of the security update for Office for Mac 2011 14.6.4</a></li><li><a href=“https://support.microsoft.com/help/3155777” target=“_self”>KB3155777 MS16-054: Description of the security update for Office 2016 for Mac: May 10, 2016</a></li></ul><h3>Nonsecurity-related fixes and improvements that are included in this security update</h3><ul><li>Translates the extension parts of contact card and phone number in multiple languages to make sure that the meaning is accurate. <br /></li><li>This update adds support for Javanese Script. <br /></li><li>Contains fixes for the following nonsecurity issues:<br /><br /><br /><ul><li>Assume that you have a document that’s digitally signed and the document has controls that’s bound to the document metadata. After the document metadata is updated, Word 2013 still considers the document signature as valid. <br /></li><li>After you enable and disable Split window for a document that has an ActiveX control in Word 2013, Word 2013 crashes. <br /></li><li>When you scroll through a document that has an ActiveX control in Word 2013, the ActiveX control is switched to design mode. <br /></li><li>After you compare or combine two versions of a document that are coauthored by different coauthors in Word 2013, some or even all OLE objects are marked as changed. <br /></li><li>Lync 2013 (Skype for Business) doesn’t show the extension of the telephone number of an Outlook contact. For example, only “(xxx) xxx-xxxx” is displayed if the telephone number is “(xxx) xxx-xxxx; xxxx.”<br /></li><li>You experience the following issues with SharePoint document versions if there’s no Internet connection but only intranet connection: The check in, check-out and versioning features do not work. When you open a checked-out document, the check in button isn’t visible. When you select an earlier version in the version history, the version isn’t opened. After you save and close an edited document, the check in dialog isn’t popped-up.<br /><br /></li><li>When you set accounts by using ADAL on third-party secure token services that aren’t enabled for Windows Authentication in Outlook 2013, Outlook 2013 doesn’t prompt for credentials. <br /></li><li>Assume that you have a document that’s digitally signed and the document has controls that’s bound to the document metadata. After the document metadata is updated, Word 2016 still considers the document signature is valid. <br /></li><li>Hebrew characters in footnote references are reversed in Word 2016. <br /></li><li>When you paste mixed RTL and LTR plain text into a document in Word 2016, punctuation might appear on the wrong side of words. <br /></li><li>Sometimes Word 2016 does not show a MacroButton field, and shows the following message instead:<br /><br /><div>Display text cannot span more than one line!</div><br /></li><li>After you enable and disable Split window for a document that has an ActiveX control in Word 2016, Word 2016 crashes. <br /></li><li>Word 2016 may crash if a list item begins with a diacritic, and the list uses a space (instead of a tab) for indentation. <br /></li><li>After you compare or combine two versions of a document that are coauthored by different coauthors in Word 2016, all OLE objects are marked as changed. <br /></li><li>Autocorrect changes incorrect characters in the presence of diacritic in Word 2016. <br /></li><li>Sometimes Word 2016 shows numbers incorrectly when the <span>Numeral</span> setting is set to <span>Context</span> in the <span>Word Option</span> dialog box. <br /></li><li>When you scroll through a document that has an ActiveX control in Word 2016, the ActiveX control is switched to design mode. <br /></li><li>The Send as PDF function is unavailable in Reading mode in SharePoint Server 2016. <br /></li><li>Some symbol characters are changed to “1” unexpectedly in the following scenarios: You send a RTF format email message that contains some symbol characters in Outlook 2016. You copy and paste some symbol characters in Word 2016.<br /><br /></li></ul></li></ul></div><h2>More Information</h2><div><div><div><div><span><span></span></span><span><span>Security update deployment information</span></span></div><div><span><div><h4>Microsoft Office 2007 (all editions) and other software </h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2007 Service Pack 3:<br /><span>oartconv2007-kb2984938-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office 2007 Service Pack 3:<br /><span>oart2007-kb2984943-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2007 Service Pack 3:<br /><span>word2007-kb3115116-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office Compatibility Pack:<br /><span>wordconv2007-kb3115115-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word Viewer:<br /><span>office-kb3115132-fullfile-enu.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>Use the <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/2984938”>Microsoft Knowledge Base article 2984938 </a><br />See <a href=“https://support.microsoft.com/en-us/help/2984943”>Microsoft Knowledge Base article 2984943 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115116”>Microsoft Knowledge Base article 3115116 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115115”>Microsoft Knowledge Base article 3115115 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115132”>Microsoft Knowledge Base article 3115132 </a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><br /><br /><h4>Microsoft Office 2010 (all editions)</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software. <br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2010 Service Pack 2 (32-bit editions):<span><br /><span>oartconv2010-kb3054984-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (64-bit editions) <br /><span>oartconv2010-kb3054984-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (32-bit editions):<span><br /><span>oart2010-kb3101520-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (64-bit editions) <br /><span>oart2010-kb3101520-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (32-bit editions):<span><br /><span>kb24286772010-kb3115121-fullfile-x64-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (64-bit editions) <br /><span>kb24286772010-kb3115121-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2010 Service Pack 2 (32-bit editions):<span><br /><span>word2010-kb3115123-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Word 2010 Service Pack 2 (64-bit editions) <br /><span>word2010-kb3115123-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>Use the <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3054984”>Microsoft Knowledge Base article 3054984 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3101520”>Microsoft Knowledge Base article 3101520 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115121”>Microsoft Knowledge Base article 3115121 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115123”>Microsoft Knowledge Base article 3115123 </a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><br /><br /><h4>Microsoft Office 2013 (all editions)</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2013 Service Pack 2 (32-bit editions):<span><br /><span>mso2013-kb3115016-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Office 2013 Service Pack 2 (64-bit editions) <br /><span>mso2013-kb3115016-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2013 Service Pack 1 (32-bit editions):<span><br /><span>word2013-kb3115025-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Word 2013 Service Pack 1 (64-bit editions) <br /><span>word2013-kb3115025-fullfile-x86-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>Use the <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115016”>Microsoft Knowledge Base article 3115016 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115025”>Microsoft Knowledge Base article 3115025 </a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><br /><br /><h4>Microsoft Office 2013 RT (all editions)</h4><div><table><tr><td><span>Deployment</span></td><td>The 3115016 update for Microsoft Word 2013 RT is available via <a href=“http://go.microsoft.com/fwlink/?linkid=21130” target=“_self”>Windows Update</a>. </td></tr><tr><td></td><td>The 3115025 update for Microsoft Word 2013 RT is available via <a href=“http://go.microsoft.com/fwlink/?linkid=21130” target=“_self”>Windows Update</a>. </td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>Click <strong>Control Panel</strong>, click <strong>System and Security</strong>, click <strong>Windows Update</strong>, click <strong>Installed updates</strong> under <strong>See also</strong>, and then select from the list of updates. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115016”>Microsoft Knowledge Base article 3115016 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115025”>Microsoft Knowledge Base article 3115025 </a></td></tr></table></div><br /><br /><h4>Microsoft Office 2016 (all editions)</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2016 (32-bit edition):<br /><span>msodll40ui2016-kb3115103-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office 2016 (64-bit edition):<br /><span>msodll40ui2016-kb3115103-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2016 (32-bit edition):<br /><span>word2016-kb3115094-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2016 (64-bit edition):<br /><span>word2016-kb3115094-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>Use the <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115103”>Microsoft Knowledge Base article 3115103 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115094”>Microsoft Knowledge Base article 3115094 </a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Office for Mac 2011</h4><span>Prerequisites</span><br /><br /><ul><li>Mac OS X version 10.5.8 or later version on an Intel processor</li><li>Mac OS X user accounts must have administrator privileges to install this security update</li></ul><span>Installing the Update</span><br /><br />Download and install the appropriate language version of the Microsoft Office for Mac 2011 14.6.4 Update from the <a href=“http://www.microsoft.com/download/details.aspx?familyid=6d430fa4-a261-49d8-95d4-0c9b53ac19f9” target=“_self”>Microsoft Download Center</a>. <br /><br /><ol><li>Exit any applications that are running, including virus-protection applications and all Microsoft Office applications. These applications can interfere with the installation. </li><li>Open the Microsoft Office for Mac 2011 14.6.4 Update volume on your desktop. <br /><br /><span>Note</span> This step may have been performed for you. </li><li>In the Microsoft Office for Mac 2011 14.6.4 Update volume window, double-click the Microsoft Office for Mac 2011 14.6.4 Update application, and then follow the instructions on the screen. </li><li>When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see <strong>Verifying Update Installation</strong>. To remove the update installer, first drag the Microsoft Office for Mac 2011 14.6.4 Update volume to the Trash, and then drag the file that you downloaded to the Trash. </li></ol><span>Verifying update installation</span><br /><br />To verify that a security update is installed on an affected system, follow these steps:<br /><br /><ol><li>In <strong>Finder</strong>, navigate to the <strong>Application Folder</strong> (Microsoft Office 2011). </li><li>Select <strong>Word</strong>, <strong>Excel</strong>, <strong>PowerPoint</strong>, or <strong>Outlook</strong>, and then start the application. </li><li>On the application menu, click <strong>About Application_Name</strong> (where Application_Name is Word, Excel, PowerPoint, or Outlook). </li></ol>If the <strong>Latest Installed Update Version</strong> number is <span>14.6.4</span>, the update has been successfully installed. <br /><br /><span>Restart Requirement</span><br /><br />This update does not require you to restart your computer. <br /><br /><span>Removing the Update</span><br /><br />This security update cannot be uninstalled. <br /><br /><span>Additional Information</span><br /><br />If you have technical questions or problems downloading or using this update, see <a href=“https://www.microsoft.com/mac/support” target=“_self”>Microsoft for Mac Support</a> to learn about the support options that are available to you.<br /><br /><br /><h4>Office 2016 for Mac</h4><span>Prerequisites</span><br /><br /><ul><li>Mac OS X Yosemite 10.10 or a later version running on an Intel processor</li><li>A valid Microsoft Office 365 subscription</li></ul><span>Installing the Update</span><br /><br />Download and install the Microsoft Office 2016 for Mac 15.22.0 Update for the appropriate application from <a href=“https://support.microsoft.com/en-us/help/3155777”>Microsoft Knowledge Base article 3155777 </a>. <br /><br /><ol><li>Exit any applications that are running, including virus-protection applications and all Microsoft Office applications. These applications can interfere with the installation. </li><li>Open the Microsoft Office 2016 for Mac 15.22.0 Update volume on your desktop. <br /><br /><span>Note</span> This step may have been performed for you. <br /></li><li>In the Microsoft Office 2016 for Mac 15.22.0 Update volume window, double-click the Microsoft Office 2016 for Mac 15.22.0 Update application, and then follow the instructions on the screen. </li><li>When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see <strong>Verifying Update Installation</strong>. To remove the update installer, first drag the Microsoft Office 2016 for Mac 15.22.0 Update volume to the Trash, and then drag the file that you downloaded to the Trash. </li></ol><span>Verifying Update Installation</span><br /><br />To verify that a security update is installed on an affected system, follow these steps:<br /><br /><ol><li>In <strong>Finder</strong>, navigate to the <strong>Application Folder</strong> (Microsoft Office 2016). </li><li>Select <strong>Word</strong>, <strong>Excel</strong>, <strong>PowerPoint</strong>, or <strong>Outlook</strong>, and then start the application. </li><li>On the application menu, click <strong>About Application_Name</strong> (where Application_Name is Word, Excel, PowerPoint, or Outlook). </li></ol>If the <strong>Latest Installed Update Version</strong> number is <span>15.22.0</span>, the update has been successfully installed. <br /><br /><span>Restart Requirement</span><br /><br />This update does not require you to restart your computer. <br /><br /><span>Removing the Update</span><br /><br />This security update cannot be uninstalled. <br /><br /><span>Additional Information</span><br /><br />If you have technical questions or problems downloading or using this update, see <a href=“https://www.microsoft.com/mac/support” target=“_self”>Microsoft for Mac Support</a> to learn about the support options that are available to you.<br /><br /><br /><h4>Microsoft Office Web Apps 2010 (all versions)</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office Web App 2010 Service Pack 2:<br /><span>wac2010-kb3115124-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>This security update cannot be removed. </td></tr><tr><td><span>File Information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115124”>Microsoft Knowledge Base article 3115124 </a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><br /><br /><h4>Microsoft SharePoint Server 2010 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file name</span></td><td>For Word Automation Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:<br /><span>wdsrv2010-kb3115117-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>After you install this security update on all SharePoint servers, you must run the PSconfig tool to complete the installation process. <br />You may have to restart the computer after you install this security update. <br />In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer. <br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update. <br />For more information, see <a href=“https://support.microsoft.com/en-us/help/887012”>Why you may be prompted to restart your computer after you install a security update on a Windows-based computer </a>. </td></tr><tr><td><span>Removal information</span></td><td>This security update cannot be removed. </td></tr><tr><td><span>File Information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115117”>Microsoft Knowledge Base article 3115117 </a></td></tr></table></div><h4>Microsoft Office 2007 (all editions) and other software </h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2007 Service Pack 3:<br /><span>oartconv2007-kb2984938-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office 2007 Service Pack 3:<br /><span>oart2007-kb2984943-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office 2007 Service Pack 3:<br /><span>oart2007-kb3114893-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2007 Service Pack 3:<br /><span>word2007-kb3115116-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2007 Service Pack 3:<br /><span>word2007-kb3115465-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office Compatibility Pack:<br /><span>wordconv2007-kb3115115-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office Compatibility Pack:<br /><span>wordconv2007-kb3115464-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word Viewer:<br /><span>office-kb3115132-fullfile-enu.exe</span></td></tr><tr><td></td><td>For Microsoft Word Viewer:<br /><span>office-kb3115480-fullfile-enu.exe</span></td></tr><tr><td></td><td>For Microsoft Word Viewer:<br /><span>office-kb3115479-fullfile-enu.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/help/912203” target=“_self”>Microsoft Knowledge Base Article 912203</a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/help/887012” target=“_self”>Microsoft Knowledge Base Article 887012</a>. </td></tr><tr><td><span>Removal information</span></td><td>Use the <span>Add or Remove Programs </span> item in <span> Control Panel</span>. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/help/2984938” target=“_self”>Microsoft Knowledge Base Article 2984938</a><br />See <a href=“https://support.microsoft.com/help/2984943” target=“_self”>Microsoft Knowledge Base Article 2984943</a><br />See <a href=“https://support.microsoft.com/help/3114893” target=“_self”>Microsoft Knowledge Base Article 3114893</a><br />See <a href=“https://support.microsoft.com/help/3115116” target=“_self”>Microsoft Knowledge Base Article 3115116</a><br />See <a href=“https://support.microsoft.com/help/3115465” target=“_self”>Microsoft Knowledge Base Article 3115465</a><br />See <a href=“https://support.microsoft.com/help/3115115” target=“_self”>Microsoft Knowledge Base Article 3115115</a><br />See <a href=“https://support.microsoft.com/help/3115464” target=“_self”>Microsoft Knowledge Base Article 3115464</a><br />See <a href=“https://support.microsoft.com/help/3115132” target=“_self”>Microsoft Knowledge Base Article 3115132</a><br />See <a href=“https://support.microsoft.com/help/3115480” target=“_self”>Microsoft Knowledge Base Article 3115480</a><br />See <a href=“https://support.microsoft.com/help/3115479” target=“_self”>Microsoft Knowledge Base Article 3115479</a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><br /><br /><h4>Microsoft Office 2010 (all editions)</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software. <br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2010 Service Pack 2 (32-bit editions):<span><br /><span>oartconv2010-kb3054984-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (64-bit editions) <br /><span>oartconv2010-kb3054984-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (32-bit editions):<span><br /><span>oart2010-kb3101520-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (64-bit editions) <br /><span>oart2010-kb3101520-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (32-bit editions):<span><br /><span>kb24286772010-kb3115121-fullfile-x64-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Office 2010 Service Pack 2 (64-bit editions) <br /><span>kb24286772010-kb3115121-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2010 Service Pack 2 (32-bit editions):<span><br /><span>word2010-kb3115123-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Word 2010 Service Pack 2 (64-bit editions) <br /><span>word2010-kb3115123-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>Use the <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3054984”>Microsoft Knowledge Base article 3054984 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3101520”>Microsoft Knowledge Base article 3101520 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115121”>Microsoft Knowledge Base article 3115121 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115123”>Microsoft Knowledge Base article 3115123 </a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><br /><br /><h4>Microsoft Office 2013 (all editions)</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2013 Service Pack 2 (32-bit editions):<span><br /><span>mso2013-kb3115016-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Office 2013 Service Pack 2 (64-bit editions) <br /><span>mso2013-kb3115016-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2013 Service Pack 1 (32-bit editions):<span><br /><span>word2013-kb3115025-fullfile-x86-glb.exe</span></span></td></tr><tr><td></td><td>For Microsoft Word 2013 Service Pack 1 (64-bit editions) <br /><span>word2013-kb3115025-fullfile-x86-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>Use the <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115016”>Microsoft Knowledge Base article 3115016 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115025”>Microsoft Knowledge Base article 3115025 </a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><br /><br /><h4>Microsoft Office 2013 RT (all editions)</h4><div><table><tr><td><span>Deployment</span></td><td>The 3115016 update for Microsoft Word 2013 RT is available via <a href=“http://go.microsoft.com/fwlink/?linkid=21130” target=“_self”>Windows Update</a>. </td></tr><tr><td></td><td>The 3115025 update for Microsoft Word 2013 RT is available via <a href=“http://go.microsoft.com/fwlink/?linkid=21130” target=“_self”>Windows Update</a>. </td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>Click <strong>Control Panel</strong>, click <strong>System and Security</strong>, click <strong>Windows Update</strong>, click <strong>Installed updates</strong> under <strong>See also</strong>, and then select from the list of updates. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115016”>Microsoft Knowledge Base article 3115016 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115025”>Microsoft Knowledge Base article 3115025 </a></td></tr></table></div><br /><br /><h4>Microsoft Office 2016 (all editions)</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><br /><br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office 2016 (32-bit edition):<br /><span>msodll40ui2016-kb3115103-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Office 2016 (64-bit edition):<br /><span>msodll40ui2016-kb3115103-fullfile-x64-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2016 (32-bit edition):<br /><span>word2016-kb3115094-fullfile-x86-glb.exe</span></td></tr><tr><td></td><td>For Microsoft Word 2016 (64-bit edition):<br /><span>word2016-kb3115094-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>Use the <strong>Add or Remove Programs</strong> item in <strong>Control Panel</strong>. </td></tr><tr><td><span>File information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115103”>Microsoft Knowledge Base article 3115103 </a><br />See <a href=“https://support.microsoft.com/en-us/help/3115094”>Microsoft Knowledge Base article 3115094 </a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><h4>Office for Mac 2011</h4><span>Prerequisites</span><br /><br /><ul><li>Mac OS X version 10.5.8 or later version on an Intel processor</li><li>Mac OS X user accounts must have administrator privileges to install this security update</li></ul><span>Installing the Update</span><br /><br />Download and install the appropriate language version of the Microsoft Office for Mac 2011 14.6.4 Update from the <a href=“http://www.microsoft.com/download/details.aspx?familyid=6d430fa4-a261-49d8-95d4-0c9b53ac19f9” target=“_self”>Microsoft Download Center</a>. <br /><br /><ol><li>Exit any applications that are running, including virus-protection applications and all Microsoft Office applications. These applications can interfere with the installation. </li><li>Open the Microsoft Office for Mac 2011 14.6.4 Update volume on your desktop. <br /><br /><span>Note</span> This step may have been performed for you. </li><li>In the Microsoft Office for Mac 2011 14.6.4 Update volume window, double-click the Microsoft Office for Mac 2011 14.6.4 Update application, and then follow the instructions on the screen. </li><li>When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see <strong>Verifying Update Installation</strong>. To remove the update installer, first drag the Microsoft Office for Mac 2011 14.6.4 Update volume to the Trash, and then drag the file that you downloaded to the Trash. </li></ol><span>Verifying update installation</span><br /><br />To verify that a security update is installed on an affected system, follow these steps:<br /><br /><ol><li>In <strong>Finder</strong>, navigate to the <strong>Application Folder</strong> (Microsoft Office 2011). </li><li>Select <strong>Word</strong>, <strong>Excel</strong>, <strong>PowerPoint</strong>, or <strong>Outlook</strong>, and then start the application. </li><li>On the application menu, click <strong>About Application_Name</strong> (where Application_Name is Word, Excel, PowerPoint, or Outlook). </li></ol>If the <strong>Latest Installed Update Version</strong> number is <span>14.6.4</span>, the update has been successfully installed. <br /><br /><span>Restart Requirement</span><br /><br />This update does not require you to restart your computer. <br /><br /><span>Removing the Update</span><br /><br />This security update cannot be uninstalled. <br /><br /><span>Additional Information</span><br /><br />If you have technical questions or problems downloading or using this update, see <a href=“https://www.microsoft.com/mac/support” target=“_self”>Microsoft for Mac Support</a> to learn about the support options that are available to you.<br /><br /><br /><h4>Office 2016 for Mac</h4><span>Prerequisites</span><br /><br /><ul><li>Mac OS X Yosemite 10.10 or a later version running on an Intel processor</li><li>A valid Microsoft Office 365 subscription</li></ul><span>Installing the Update</span><br /><br />Download and install the Microsoft Office 2016 for Mac 15.22.0 Update for the appropriate application from <a href=“https://support.microsoft.com/en-us/help/3155777”>Microsoft Knowledge Base article 3155777 </a>. <br /><br /><ol><li>Exit any applications that are running, including virus-protection applications and all Microsoft Office applications. These applications can interfere with the installation. </li><li>Open the Microsoft Office 2016 for Mac 15.22.0 Update volume on your desktop. <br /><br /><span>Note</span> This step may have been performed for you. <br /></li><li>In the Microsoft Office 2016 for Mac 15.22.0 Update volume window, double-click the Microsoft Office 2016 for Mac 15.22.0 Update application, and then follow the instructions on the screen. </li><li>When the installation finishes successfully, you can remove the update installer from your hard disk. To verify that the installation finished successfully, see <strong>Verifying Update Installation</strong>. To remove the update installer, first drag the Microsoft Office 2016 for Mac 15.22.0 Update volume to the Trash, and then drag the file that you downloaded to the Trash. </li></ol><span>Verifying Update Installation</span><br /><br />To verify that a security update is installed on an affected system, follow these steps:<br /><br /><ol><li>In <strong>Finder</strong>, navigate to the <strong>Application Folder</strong> (Microsoft Office 2016). </li><li>Select <strong>Word</strong>, <strong>Excel</strong>, <strong>PowerPoint</strong>, or <strong>Outlook</strong>, and then start the application. </li><li>On the application menu, click <strong>About Application_Name</strong> (where Application_Name is Word, Excel, PowerPoint, or Outlook). </li></ol>If the <strong>Latest Installed Update Version</strong> number is <span>15.22.0</span>, the update has been successfully installed. <br /><br /><span>Restart Requirement</span><br /><br />This update does not require you to restart your computer. <br /><br /><span>Removing the Update</span><br /><br />This security update cannot be uninstalled. <br /><br /><span>Additional Information</span><br /><br />If you have technical questions or problems downloading or using this update, see <a href=“https://www.microsoft.com/mac/support” target=“_self”>Microsoft for Mac Support</a> to learn about the support options that are available to you.<br /><br /><br /><h4>Microsoft Office Web Apps 2010 (all versions)</h4><span>Reference Table</span><br /><br />The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file name</span></td><td>For Microsoft Office Web App 2010 Service Pack 2:<br /><span>wac2010-kb3115124-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message appears that advises you to restart. <br /><br />To help reduce the chance that a restart will be required, stop all affected services and close all applications that may use the affected files prior to installing the security update. For more information about the reasons why you may be prompted to restart, see <a href=“https://support.microsoft.com/en-us/help/887012”>Microsoft Knowledge Base article 887012 </a>. </td></tr><tr><td><span>Removal information</span></td><td>This security update cannot be removed. </td></tr><tr><td><span>File Information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115124”>Microsoft Knowledge Base article 3115124 </a></td></tr><tr><td><span>Registry key verification</span></td><td>Not applicable</td></tr></table></div><br /><br /><h4>Microsoft SharePoint Server 2010 (all editions)</h4><h5>Reference table</h5>The following table contains the security update information for this software.<br /><div><table><tr><td><span>Security update file name</span></td><td>For Word Automation Services on supported editions of Microsoft SharePoint Server 2010 Service Pack 2:<br /><span>wdsrv2010-kb3115117-fullfile-x64-glb.exe</span></td></tr><tr><td><span>Installation switches</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/912203”>Microsoft Knowledge Base article 912203 </a></td></tr><tr><td><span>Restart requirement</span></td><td>After you install this security update on all SharePoint servers, you must run the PSconfig tool to complete the installation process. <br />You may have to restart the computer after you install this security update. <br />In some cases, this update does not require a restart. If the required files are being used, this update will require a restart. If this behavior occurs, a message is displayed that advises you to restart the computer. <br />To help reduce the possibility that a restart will be required, stop all affected services and close all applications that may use the affected files before you install this security update. <br />For more information, see <a href=“https://support.microsoft.com/en-us/help/887012”>Why you may be prompted to restart your computer after you install a security update on a Windows-based computer </a>. </td></tr><tr><td><span>Removal information</span></td><td>This security update cannot be removed. </td></tr><tr><td><span>File Information</span></td><td>See <a href=“https://support.microsoft.com/en-us/help/3115117”>Microsoft Knowledge Base article 3115117 </a></td></tr></table></div></div><br /></span></div></div></div><div><div><div><span><span></span></span><span><span>How to get help and support for this security update</span></span></div><div><span><div>Help for installing updates: <a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <a href=“https://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help for protecting your Windows-based computer from viruses and malware: <a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <a href target=“_self”>International Support</a></div><br /></span></div></div></div></div></body></html>

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.7 High

EPSS

Percentile

98.0%