Microsoft Excel KB5002914 Update Breaks Copy‑Paste and Autofill for Multiple Office Versions
What Happened — Microsoft’s September 2026 Patch Tuesday delivered Office security update KB5002914. Shortly after installation, users of Excel 2016‑2024 reported that copy‑and‑paste shortcuts, drag‑fill, and formula autofill stopped working. Uninstalling or rolling back the update restores normal functionality.
Why It Matters for Trust & Control Assurance —
- The failure illustrates the danger of deploying patches without a documented testing phase, a core scenario that continuous control‑assurance programs are designed to prevent and evidence.
- Maintaining a defensible audit trail of change‑management (test plans, approval records, rollback procedures) satisfies multiple control objectives across frameworks.
- Verisq’s Control‑Mapping capability can automatically surface the missing evidence and help you demonstrate that your update‑testing controls are in place.
Who Is Affected — Enterprises and SMBs that run Microsoft Office 2016‑2024 (MSI or Click‑to‑Run) across any industry; primarily IT and end‑user teams that rely on Excel for daily data manipulation.
Recommended Actions —
- Pause automatic deployment of KB5002914 across the organization.
- Conduct a pilot installation on a limited set of machines and verify copy‑paste and autofill functionality.
- Record test results, approval signatures, and rollback steps as part of your change‑management evidence.
- If the update is required, use the Microsoft‑provided PowerShell removal command or Group‑Policy downgrade to restore the previous
excel.exe.
Source: BleepingComputer
Technical Notes — The regression affects both MSI‑based and Click‑to‑Run Office installations, spanning Excel 2016 through 2024. No CVE is associated; the issue is a functional regression introduced by the security patch. Workarounds that replace individual binaries can cause version mismatches and are not recommended. Source: same article