Security1 publisher2 min readPublished
Microsoft's Excel paste fix reaches only the installer edition of Office 2016
The September Office update KB5002914 makes some Excel paste operations fail with no beep and no error message. The fix Microsoft shipped Wednesday, KB5002655, covers only the MSI edition of Office 2016.
The Watch · Security desk
What happened
- Users on Microsoft Q&A and Reddit reported that the September 2026 Office security update KB5002914 breaks copy-and-paste, autofill and formula dragging in Excel.
- Wednesday's KB5002655 resolves it for Excel 2016 only, and covers just the Microsoft Installer edition of Office 2016, not Click-to-Run editions such as Microsoft Office 365 Home.
- Microsoft's interim guidance for everyone else is to paste through Paste Special or Ctrl+Alt+V and pick the paste type by hand.
Compiled by The WatchSomething wrong?How this is made
Why it matters
- decision Patch owners on 2019, 2021, 2024 and Online now pick between a build where pastes fail without warning and an uninstall that strips September's remote code execution and information disclosure fixes.
- exposure Machines rolled back with the published commands are pinned to older Office builds and will not climb back to the September patch level until someone unpins them.
- cost Nothing errors, so the cost lands in the data: stale cells and unfilled formulas reach reports before anyone knows a paste failed.
- constraint Even the covered population is not clean, since Microsoft says conditional formatting scenarios remain affected after KB5002655.
Microsoft described the failure this way: "Although users try to paste content, the source remains selected and the destination is unmodified" [3]. It added: "When this issue occurs, users receive no indication of the failure, such as a beep or error message" [4]. The company confirmed the reports earlier this week and attributed them to a code regression [5]. A paste that quietly does nothing raises no helpdesk ticket; it leaves a stale cell in a workbook and a user who believes the operation worked.
Five builds are affected: Excel Online and Excel 2024, 2021, 2019 and 2016 [6]. The update released Wednesday, KB5002655, resolves the problem for Excel 2016 [7]. That leaves four builds on the workaround [16]. Inside 2016 the coverage narrows again, because Microsoft said the fix addresses only the Microsoft Installer edition of Office 2016 and does not apply to Click-to-Run editions such as Microsoft Office 365 Home [10].
The support document published Wednesday says the update "fixes the known issue in KB5002914 that causes certain paste operations to fail silently" [9]. Asked by BleepingComputer to confirm that KB5002655 covers the copy-and-paste shortcut bug, Microsoft said: "We released update KB5002655 to mitigate this issue. We are aware of some user scenarios impacted by conditional formatting and recommend customers follow our guidance" [8]. For everyone else, the guidance is Paste Special from the Home tab, or Ctrl+Alt+V, choosing formula, values, number formats or paste link by hand [11].
Affected users have reported that removing KB5002914 restores copy-and-paste [12]. BleepingComputer describes what comes off with it as a long list of remote code execution and information disclosure patches, though it does not list the CVEs [13]. The rollback commands circulating for Click-to-Run take Office 2019 back to build 16.0.10417.20197, and Office 2021 and 2024 back to 16.0.20326.20132 [14]. Every machine that runs one of those commands sits below the September patch level until an administrator moves it forward again, and nothing in the update channel will do that automatically while the version is pinned.
This is not the first Office servicing problem this year. In June, Microsoft fixed an issue that stopped Windows 365 users from downloading and installing the Office suite, and another that stopped Office for the web users from opening Excel and PowerPoint files [15]. The pattern here is regression in the delivery pipeline. Microsoft has not shipped a permanent fix for all affected Excel versions [17].
What to watch
- Whether the fix for Excel Online and the Click-to-Run builds of 2019, 2021 and 2024 arrives inside October's Office security update or out of band.
- Whether the conditional formatting scenarios Microsoft flagged against KB5002655 become a second documented known issue.
- Whether estates pinned to 16.0.10417.20197 or 16.0.20326.20132 get unpinned once a broader fix ships, or stay downlevel.