The Update BureauKB5002648: Cumulative update for Office Online Server, version OOS, November 2024. Excel remote code execution vulnerability resolved
In short
Resolves a Microsoft Excel remote code execution vulnerability, CVE-2024-49026, rated Important.
Does it affect you? Applies to: Computers running the release version of Office Online Server. The update package is for 64-bit installations.
What changes
Fix 1 change
Microsoft Excel
For: Office Online Server administrators
-
The Microsoft Excel remote code execution vulnerability is resolved.1
Resolves CVE-2024-49026.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-11-12
- Classification
- Security Updates
- Type
- Cumulative update
- Restart
- Required
- Replaces
- KB5002601, KB5002503
- Replaced by
- KB5002677
| Version | Build | Channel |
|---|---|---|
| OOS | 16.0.10416.20007 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Microsoft Excel Remote Code Execution Vulnerability
|
Important | 7.8 |
Downloads (Microsoft Update Catalog)
Package
OOS
1.0 GB
Sources
Updated
Cited passages from Microsoft's official notes (1)
-
1.
This security update resolves a Microsoft Excel remote code execution vulnerability.
support.microsoft.com
Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: passed
A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 4/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake