Description of the security update for Word 2016: January 8, 2019

This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2019-0561 and Microsoft Common Vulnerabilities and Exposures CVE-2019-0585.

Note To apply this security update, you must have the release version of Microsoft Word 2016 installed on the computer.

Be aware that the update in the Microsoft Download Center applies to the Microsoft Installer (.msi)-based edition of Office 2016. It doesn't apply to the Office 2016 Click-to-Run editions, such as Microsoft Office 365 Home (see Determining your Office version).

• Adds support for future Japanese eras in date fields.

• Adds support for embedding base64 encoded images in Word 2016.

• Improves Chinese Traditional translations of the formatted page label in the status bar in the lower-left corner of a document.

• Considering the following conditions:

• There are two consecutive optional hyphens in a word in a paragraph in a document.
• The paragraph is justified through the Justify command in the Paragraph Ribbon.
• Nonprinting characters are turned on.

In this case, when you type text until the word that contains two consecutive optional hyphens is broken to the next line, Word 2016 crashes.

• When you open a Word 2010 document that contains a lot of blank spaces in cells in a table by using Word 2016, Word 2016 hangs.

• When the text in a textbox ends with a hidden paragraph mark and you turn nonprinting characters off, the last line of the text moves down.

• After you accept or reject the track changes in a date picker control in a document, when you click out of the date picker control, the control is marked as a change again.

• When you receive an email message that contains a large inline image, the image is compressed and unreadable if it contains text.

• When you attach a file in an email message, the attachment name is truncated.

• If Caps Lock key is turned on when the cursor focus is not in Word 2016, the Correct accidental usage of Caps Lock key option that is enabled in the AutoCorrect options won’t work as expected. For example, if you type “tHIS” in a document, that word won’t be replaced by “This”, and Caps Lock won’t be automatically turned off.

• This update fixes the following issues that concern Quick Parts:

• When you insert a SharePoint Library column as a Quick Part in a document that contains double-byte character sets (DBCS) characters in the filename, Word 2016 crashes.
• If a SharePoint lookup field’s name contains a space or other special characters, the text for the field values is not displayed when you insert it as a Quick Part in a Word document.