KB5002728: Cumulative update for Office Online Server, version OOS, June 2025. Excel remote code execution vulnerability resolved

Resolves an Important remote code execution vulnerability in Excel, CVE-2025-47165.

Does it affect you? Applies to: Devices running the release version of Office Online Server, x64.

What changes

Verified in package

For: Office Online Server administrators

A remote code execution vulnerability in Excel is resolved.¹
Resolves CVE-2025-47165.

Data sheet · Security · Downloads · Components Click to collapse or expand

Released: 2025-06-10
Classification: Security Updates
Type: Cumulative update
Restart: Required
Replaces: KB5002707, KB5002699, KB5002690, KB5002679

+4 earlier
KB5002677, KB5002648, KB5002601, KB5002503
Replaced by: KB5002740

Version	Build	Channel
OOS	16.0.10417.20018	General availability

1 vulnerability fixed

1 important

Vulnerability	Severity	CVSS
CVE-2025-47165 Microsoft Excel Remote Code Execution Vulnerability	Important	7.8

Package OOS

1.0 GB

1,599 files changed since the previous update for the same versions.

Verified in package: changed files confirm Excel.

Updated Oct 27, 2026

Cited passages from Microsoft's official notes (1)

1. This security update resolves a Microsoft Excel remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2025-47165. support.microsoft.com

Checked automatically: 8 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026

A second AI read the text against the sources: correctness 5/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake