Microsoft Excel Copy‑Paste Failure After September 2026 Security Update Affects All Office Users
What Happened — Microsoft confirmed that the September 2026 security update (KB5002914) caused silent copy‑and‑paste, autofill, and formula‑dragging failures in Excel 2016‑2024 and Excel Online. The operation appears to succeed but leaves the destination unchanged and provides no error message.
Why It Matters for Trust & Control Assurance
- The incident shows how a routine patch can break a core productivity function, exposing gaps in change‑management validation.
- Continuous control‑assurance programs need to monitor patch deployments, capture functional test evidence, and retain a defensible audit trail when updates cause service disruption.
- Verisq’s Control Mapping capability lets you map this failure to the “Patch Management / Change Control” control area and collect the evidence auditors expect.
Who Is Affected – Any organization that uses Microsoft Excel 2016, 2019, 2021, 2024, or Excel Online – spanning finance, health, education, government, and most other sectors.
Recommended Actions
- Identify the Office version(s) in your environment.
- Manually download and install the remedial updates (KB5002665 for Office 2016, Build 10417.20208 for Office LTSC 2019, Build 14334.20918 for Office LTSC 2021, Build 17932.21000 for Office LTSC 2024).
- Validate critical Excel workflows (copy‑paste, autofill, formula dragging) after patching; use “Paste Special” as a temporary workaround for conditional‑formatting scenarios.
- Record the change in your configuration‑management database and retain screenshots or logs as audit evidence.
Technical Notes – The bug is tied to KB5002914; it silently aborts paste operations without alerts. Conditional formatting can prolong the issue on older LTSC builds. A manual “Paste Special” (Ctrl+Alt+V) mitigates the problem until the permanent fix is released. Source: BleepingComputer