This article originally appeared in TidBITS on 2016-07-17 at 11:41 p.m.
The permanent URL for this article is:
Include images: Off

Microsoft Office 2016 15.24 and Office 2011 14.6.6

by Agen G. N. Schmitz

Microsoft has issued version 15.24 of its Office 2016 [1] application suite, which resolves vulnerabilities that could allow remote code execution and provides a handful of fixes and improvements to the individual apps. Word now makes date pickers, drop-down lists, and other content controls interactive, while Outlook improves performance when opening meeting events with over 1000 recipients and ensures attachments show up for email messages in iOS. Office 365 subscribers can also now see a list of recently shared documents, spreadsheets, and presentations.

On the security front [2], both Office 2016 and Office 2011, which Microsoft has updated to version 14.6.6 [3], resolve yet another memory corruption vulnerability (this time in Excel), which could allow remote attackers to execute arbitrary code via a maliciously crafted spreadsheet. ($149.99 for one-time purchase, free update through Microsoft AutoUpdate, release notes [4], 10.10+)