MS15-099: Vulnerabilities in Microsoft Office could allow remote code execution: September 8, 2015

• Enables single sign-on (SSO) for ADAL on cloud domain-joined computers. On cloud domain-joined computers that have Modern Authentication enabled, domain accounts seem to be logged in. However, you can't open files.
  
• Selecting an icon set for a KPI in PowerPivot is ignored in Microsoft Excel 2013.
  
• This update also contains fixes for the following nonsecurity issues:
  
  • Consider the following scenario:
    
    • You add an ActiveX combo box control or an ActiveX list box control to a workbook in Microsoft Excel 2010.
    • The ListFillRange property of the control refers to the data of another worksheet in the workbook.
    • You zoom the views of both worksheets to different zoom factors that are not 100 percent.
    • You try to change the selection of the combo box control or the list box control.
    In this scenario, you may receive the following error message:
    
    
    Not enough system resources to display completely.
    
    
  • Charts can't be inserted in other Office applications such as Word or PowerPoint if an add-in from a network location is loaded in Excel 2013.
    
  • Some object model calls (Range::HasArray, Range:HasFormula and Range::NumberFormat) are slower in Excel 2013 than in earlier versions of Excel.
    
  • When you try to use a third-party application to host Excel 2013 to open a workbook externally in an Excel window, the window opens without a workbook.
    
  • When you enable the Always use connection file option for an ODBC connection to any data source such as Microsoft Access or Microsoft SQL Server in Excel 2013, Excel 2013 may crash.
    
  • Fixes an issue that hides detailed error messages from the Power Query users in various scenarios and causes a generic error notification to be displayed instead.
    
  • When you print or print preview a worksheet in Excel 2013, the name of a group box (form control) is displayed in an incorrect position.
    
  • When you copy and paste cells that have conditional formatting set in Excel 2013, the conditional formatting rules are duplicated even though the rules already exist in the cells.
    
    Note After you apply the update, you have to follow the instructions in the "Registry information" section to fix this issue.
    
  • Certain edits in PowerPivot cause Power Query connections to be read-only in Excel and block additional edits in Power Query. For more information, see Editing columns and tables from a Power Query connection is no longer possible by using PowerPivot in Excel 2013 .
    
  • Sometimes you receive an out-of-memory error when you create a new Excel window after you use an Excel preview window in Microsoft Outlook.
    
  • When you print or print preview a worksheet in Excel 2010, the name of a group box (form control) is displayed in an incorrect position.
    
  • This update changes the way temporary file names are generated for features such as opening read-only files from share folders, sending workbooks as email attachments and interacting with shared workbooks. Therefore, more valid names for .tmp files can be generated. This greatly increases the number of .tmp files that can be opened before a duplicate name occurs.
    
  • When a user profile is deleted from My Site, an email is sent to the user's manager. However, this email contains a link to the user's root My Site, and this My Site no longer exists. In addition, you receive the following error message:
    
    
    User not found.
    
    
  • When you type a space in the people picker to add a user to a SharePoint group for a Microsoft SharePoint Server 2013 site, a specified permission is added to the group unexpectedly. However, you expect the people picker to report no match.
    
  • When you enable the Metadata Navigation and Filtering feature in a SharePoint Server 2013 site and select a metadata tag in the site, no results are displayed if the number of terms in the navigation is large.
    
  • When the Windows SharePoint Services Tracing (SPTrace) service is set up to run under a managed account and the managed account password is changed through SharePoint, the service isn't updated to use the new password and does not start. You may receive an error message that resembles the following:
    
    
    Windows could not start the "SharePoint Tracing Service" on Local Computer.
    Error: 1069: The service did not start due to a logon failure.
    
  • When you try to change the password of a distributed cache account on a SharePoint Server 2013 server, you receive the following error message if the server does not have a distributed cache service instance provisioned:
    
    
    Sorry, something went wrong.
    Operation is not valid due to the current state of the object.
  • You can't set connections for a filter web part on a SharePoint Server 2013 site because the Connection Type combo box has no value.
    
  • When you try to edit a document in a subfolder of a SharePoint Server 2013 document library, you receive the following error message:
    
    
    A problem occurred while connecting to the server. If the problem continues, contact your administrator.
    This issue occurs if you are granted permission to the document by the Shared With function and if the Require Check Out option is enabled for the document library.
    
  • When you try to use Microsoft Visio 2013 to check in a file to a SharePoint Server 2013 document library that has required columns, you receive an error message resembles the following:
    
    
    Internal error: #3400 Action 1787: Check In File.
    
    
  • When you open a .pdf file in a SharePoint Server 2013 document library that has the Open in the client application option enabled, the .pdf file is still opened in browser.
    
  • File name is NULL and IAVFileProperties are empty or invalid in SharePoint VSAPI Scan call for old version documents.
    
  • When you upload a Word 2013 document that has a certain custom property to a document library, the w3wp.exe process crashes.
    
  • VSAPI doesn't get a subweb relative URL while it downloads a document through explorer view.
    
  • When you select links in an item of a promoted link list, all links are opened in the same tab even though the launch behavior is set to open links in a new tab.
    
  • After you change the color of a task bar on project timelines in project center, the color of other task bars is changed unexpectedly.
    
  • When you rest the mouse pointer on documents that are returned on the Search Center site, you can't see the preview of the documents but instead receive the following message:
    
    
    To start seeing previews, please log on by opening the document.
    This issue occurs if the Search Center site is located on a web application that uses the Kerberos authentication.
    
  • Performance and correctness issues in Windows Azure plugin.
    

Microsoft Office 2016 (all editions)