Skip to the content
The Update Bureau
Office Online Server OOS Office Online Server Security update
Patch Tuesday

KB5002503

KB5002503: Cumulative update for Office Online Server, version OOS, May 2024. Excel remote code execution flaw addressed

In short

Addresses one Important Microsoft Excel remote code execution vulnerability, CVE-2024-30042.

Does it affect you? Applies to: Devices with the release version of Office Online Server installed.

Build
16.0.10410.20003
Security
1 fixed
Restart
Required

What changes

Fix 1 change

Excel

For: Office Online Server users

  • An Excel flaw that could let an attacker run code remotely is addressed.1
    Resolves Microsoft Excel remote code execution vulnerability CVE-2024-30042.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2024-05-14
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaced by
KB5002601
VersionBuildChannel
OOS 16.0.10410.20003 General availability

Security

1 vulnerability fixed
1 important
VulnerabilitySeverityCVSS
Microsoft Excel Remote Code Execution Vulnerability
Important 7.8

Downloads (Microsoft Update Catalog)

Sources

Updated
Cited passages from Microsoft's official notes (1)
  1. 1. This security update resolves a Microsoft Excel remote code execution vulnerability. support.microsoft.com
Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: passed

A second AI read the text against the sources: correctness 5/5, clarity 5/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake