Reprinted from TidBITS by permission; reuse governed by Creative Commons
license BY-NC-ND 3.0. TidBITS has offered years of thoughtful commentary
on Apple and Internet topics. For free email subscriptions and access to the
entire TidBITS archive, visit http://www.tidbits.com/


   Microsoft Office 2016 15.40

   Agen G. N. Schmitz

   Microsoft has issued version 15.40 of its [1]Office 2016 application
   suite, a brief maintenance update with a focus on security. The release
   provides enhanced security as a [2]defense-in-depth measure in Word
   ([3]Advisory 170020), while Excel patches a security feature bypass
   vulnerability ([4]CVE-2017-11877) where an attacker could embed a
   control in an Excel worksheet that specifies a macro should be run in
   order to allow arbitrary code execution. ($149.99 for one-time
   purchase, free update through Microsoft AutoUpdate, [5]release notes,
   10.10+)

References

   1. https://products.office.com/en-us/mac/microsoft-office-for-mac
   2. https://en.wikipedia.org/wiki/Defense_in_depth_(computing)
   3. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV170020
   4. https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/CVE-2017-11877
   5. https://support.office.com/en-us/article/Release-notes-for-Office-2016-for-Mac-ed2da564-6d53-4542-9954-7e3209681a41

.