Skip to the content
The Update Bureau
Office Online Server OOS Office Online Server Security update
Patch Tuesday

KB5002797

KB5002797: Cumulative update for Office Online Server, version OOS, October 2025. Excel code-execution and information-disclosure flaws addressed

In short

The update addresses Excel vulnerabilities, including a Critical remote code execution flaw. It fixes 8 vulnerabilities in total.

Does it affect you? Applies to: Devices running the release version of Office Online Server. The update package is for x64.

Build
16.0.10417.20059
Security
8 fixed · 1 critical
Restart
Required

What changes

Fix 1 change

Microsoft Excel

For: Office Online Server users

  • Excel information disclosure and remote code execution vulnerabilities are addressed.1
    The update resolves Microsoft Excel information disclosure and remote code execution vulnerabilities.

Technical details

Data sheet · Security · Downloads · Components Click to collapse or expand

Data sheet

Released
2025-10-14
Classification
Security Updates
Type
Cumulative update
Restart
Required
Replaces
KB5002776, KB5002752, KB5002740, KB5002728
+8 earlier KB5002707, KB5002699, KB5002690, KB5002679, KB5002677, KB5002648, KB5002601, KB5002503
Replaced by
KB5002801
VersionBuildChannel
OOS 16.0.10417.20059 General availability

Security

8 vulnerabilities fixed
1 critical 7 important
VulnerabilitySeverityCVSS
CVE-2025-59236
Microsoft Excel Remote Code Execution Vulnerability
 Critical 8.4
CVE-2025-59223
Microsoft Excel Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-59224
Microsoft Excel Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-59225
Microsoft Excel Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-59231
Microsoft Excel Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-59233
Microsoft Excel Remote Code Execution Vulnerability
 Important 7.8
CVE-2025-59232
Microsoft Excel Information Disclosure Vulnerability
 Important 7.1
CVE-2025-59235
Microsoft Excel Information Disclosure Vulnerability
 Important 7.1

Downloads (Microsoft Update Catalog)

Package OOS
1.0 GB
wacserver-x-none.cab Main update · KB5002797 SHA-1: 0d9e5162…e39b11

Sources

Updated
Cited passages from Microsoft's official notes (1)
  1. 1. This security update resolves a Microsoft Excel information disclosure vulnerability, Microsoft Excel remote code execution vulnerability, Microsoft Excel remote code execution vulnerability. support.microsoft.com
Checked automatically: 7 of 8 checks passed, 1 quoted passage · compared with Microsoft's page on Oct 20, 2026
  • Quotes found in the official pages: passed
  • Numbers found in the sources: passed
  • Vulnerabilities from the dossier only: passed
  • Links to allowed domains only: passed
  • Every official change covered: passed
  • Readable plain text: passed
  • Changes confirmed by the file list: passed
  • Sources agree: not passed

A second AI read the text against the sources: correctness 4/5, clarity 4/5, completeness 5/5. How we work

Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake