KB5002699: Cumulative update for Office Online Server, version OOS, April 2025. Excel and Office remote code execution flaws patched

Resolves remote code execution vulnerabilities in Excel and Office, reducing the risk of an attacker running code through them.

Does it affect you? Applies to: Organizations running the release version of Office Online Server.

What changes

Verified in package

For: Office Online Server administrators

Remote code execution vulnerabilities in Excel and Office are resolved.¹
Updates Office Online Server to build 16.0.10417.20003.

Data sheet · Security · Downloads · Components Click to collapse or expand

Released: 2025-04-08
Classification: Security Updates
Type: Cumulative update
Restart: Required
Replaces: KB5002690, KB5002679, KB5002677, KB5002648

+2 earlier
KB5002601, KB5002503
Replaced by: KB5002707

Version	Build	Channel
OOS	16.0.10417.20003	General availability

3 vulnerabilities fixed

3 important

Vulnerability	Severity	CVSS
CVE-2025-26642 Microsoft Office Remote Code Execution Vulnerability	Important	7.8
CVE-2025-27746 Microsoft Office Remote Code Execution Vulnerability	Important	7.8
CVE-2025-27751 Microsoft Excel Remote Code Execution Vulnerability	Important	7.8

Package OOS

1.0 GB

1,598 files changed since the previous update for the same versions.

Verified in package: changed files confirm Excel and Office.

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (1)

1. This security update resolves a Microsoft Excel remote code execution vulnerability and Microsoft Office remote code execution vulnerability. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake