CyberNew CyberNew
Threat Intelligence & APT BleepingComputer 4 weeks ago

Microsoft fixes broken copy and paste for Excel 2016 users

CN
CyberNew Threat Research Desk
• Original Reporting: BleepingComputer
CyberNew Threat Intel Assessment
Assessed Severity: CRITICAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"Microsoft has fixed a known issue that causes copy-and-paste failures for some Excel users after installing the September 2026 KB5002914 security update. This follows a wave of customer reports on the Microsoft Q&A forums and Reddit that KB5002914 breaks copy-and-paste, autofill, and formula dragging in Excel. "Although users try to paste content, the source remains selected and the destination..."

Recommended Defense & Mitigation

  • Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
  • Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)

Microsoft Excel

Microsoft has fixed a known issue that causes copy-and-paste failures for some Excel users after installing the September 2026 KB5002914 security update.

This follows a wave of customer reports on the Microsoft Q&A forums and Reddit that KB5002914 breaks copy-and-paste, autofill, and formula dragging in Excel.

"Although users try to paste content, the source remains selected and the destination is unmodified," Microsoft said when it confirmed these issues earlier this week and blamed them on what it described as a code regression. "When this issue occurs, users receive no indication of the failure, such as a beep or error message."

Office 2016:
"C:\Program Files\Common Files\Microsoft Shared\OFFICE16\Oarpmany.exe" /removereleaseinpatch "{90160000-0012-0000-1000-0000000FF1CE}" "{27882596-A8ED-4382-9C71-6CD2DD19F732}" "1033" "0"

Office 2019:
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /update user updatetoversion=16.0.10417.20197

Office 2021 & 2024:
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /update user updatetoversion=16.0.20326.20132
Save your seat

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from BleepingComputer.

Primary Advisory →