Microsoft released a comprehensive batch of security updates on August 11, 2026, addressing critical vulnerabilities across several versions of Microsoft Office, SharePoint Server, and Click-to-Run installations, according to official support documentation.
Office 2016 Security Updates and Patches
Although Microsoft Office 2016 has reached the end of its official support lifecycle, Microsoft issued out-of-band style security updates labeled as hotfixes for the software on August 11, 2026. According to Microsoft Support, these updates target multiple remote code execution (RCE) flaws and information disclosure vulnerabilities within legacy components.
The specific patches released for the MSI-installed version of Office 2016 include:
- KB5002813: A security update for Access 2016 addressing the remote code execution vulnerability CVE-2026-64914.
- KB5002832: A security update for Office 2016 (ace) fixing core application vulnerabilities.
- KB5002903: A security update for Excel 2016 targeting multiple application flaws.
- KB5002902: A security update for Office 2016 (graph) resolving the RCE vulnerability CVE-2026-63515.
- KB5002897: A security update for Office 2016 (mso) fixing central application flaws.
- KB5002791 and KB5002795: Security updates for Office modules msodll40u and msodll99l, closing the RCE vulnerability CVE-2026-65661.
- KB5002755: A security update for Outlook 2016 closing multiple Word-based RCE vulnerabilities.
- KB5002899: A security update for PowerPoint 2016 addressing vulnerability CVE-2026-68809.
- KB5002900: A security update for Office 2016 (vbe7) patching CVE-2026-65661.
- KB5002901: A security update addressing vulnerabilities in Word 2016.
For systems running Office 2016 and Office 2019 past their respective support expiration dates, administrators can utilize third-party patching solutions such as 0patch to maintain security posture, as documented by security analyst Wolfgang Sommergut.
Click-to-Run and Modern Office Channels
Click-to-Run (C2R) deployment packages bypass traditional MSI update channels, receiving updates automatically through built-in Office mechanisms. According to Microsoft release notes, August 2026 channel builds include:
- Current Channel: Version 2607 (Build 20228.20190)
- Monthly Enterprise Channel: Version 2607 (Build 20228.20188) and Version 2606 (Build 20131.20206)
- Semi-Annual Enterprise Channel: Version 2607 (Build 20228.20186) and Version 2508 (Build 19127.20730)
- Office 2024 and 2021 Retail: Version 2607 (Build 20228.20190)
- Office LTSC 2024 Volume Licensed: Version 2408 (Build 17932.20910)
- Office LTSC 2021 Volume Licensed: Version 2108 (Build 14334.20848)
- Office 2019 Volume Licensed: Version 1808 (Build 10417.20197)
Starting in July 2026, Microsoft altered its servicing model for the Semi-Annual Enterprise Channel, delivering monthly feature and security updates identical to the Monthly Enterprise Channel schedule.
SharePoint Server and Server-Side Updates
In addition to client applications, the August 2026 Patch Tuesday deployment includes security updates for server platforms. Microsoft released KB5002893 for the SharePoint Server Subscription Edition. Furthermore, SharePoint Server 2019 and SharePoint Enterprise Server 2016 received targeted updates, including KB5002905 for SharePoint Enterprise Server 2016 and KB5002906 for its accompanying Language Pack. Updates were also issued for Office Online Server and SharePoint Workflow Manager.
Keep reading