Microsoft has released an emergency fix for a deeply disruptive bug in Excel 2016 that silently broke copy-and-paste operations, autofill, and formula dragging after the September 2026 security update. The flaw, which left users with no error message or audible warning, stemmed from a code regression in the KB5002914 update and triggered widespread frustration across Microsoft Q&A forums and Reddit. While the company has now deployed a targeted patch for Excel 2016, users running newer versions remain without a permanent solution, raising questions about the scope of the testing that allowed such a fundamental function to fail.
The Silent Breakdown: How KB5002914 Crippled Core Excel Functions
On September 9, 2026, Microsoft released the KB5002914 security update for Office, a routine patch intended to address remote code execution and information disclosure vulnerabilities. Almost immediately, users began reporting that the update had broken one of the most basic and essential features of Excel: the ability to copy data from one cell and paste it into another. When attempting a standard paste operation, the source content remained selected, and the destination cell remained unchanged. No beep, no dialog box, no error message of any kind appeared to indicate that the action had failed.
Microsoft confirmed the issue earlier this week, attributing it to what it described as a code regression introduced in the update. The problem was not limited to a single version. The bug affected Excel Online and all major desktop editions—Excel 2024, Excel 2021, Excel 2019, and Excel 2016. For users whose daily workflows depend on rapid copy-and-paste operations, the impact was immediate and severe. The same regression also broke autofill and the ability to drag formulas across cells, compounding the disruption for anyone working on data-intensive spreadsheets.
The Targeted Fix: KB5002655 Arrives for Excel 2016
Microsoft acted quickly to address the issue for one segment of its user base. On Wednesday, the company released update KB5002655, designed specifically to resolve the copy-and-paste failure for the Microsoft Installer (.msi)-based edition of Office 2016. In a support document, Microsoft stated plainly: “This update fixes the known issue in KB5002914 that causes certain paste operations to fail silently.”
It is important to understand the scope of this fix. KB5002655 does not apply to Office 2016 Click-to-Run editions, such as Microsoft Office 365 Home. It also does not resolve the bug for Excel Online, Excel 2024, Excel 2021, or Excel 2019. Microsoft acknowledged that it is still investigating the full range of affected user scenarios, particularly those involving conditional formatting. The company has advised customers to monitor its guidance for further updates.
Why Only Excel 2016? A Look at the Patching Landscape
The decision to prioritize Excel 2016 may seem puzzling given that the bug affects newer versions as well, but it reflects the fragmented nature of the Office update ecosystem. The .msi-based edition of Office 2016 is typically deployed in enterprise environments where IT administrators manage updates through traditional Windows Update channels. These organizations often require targeted patches to avoid disrupting legacy workflows. Click-to-Run editions, by contrast, receive continuous updates through a streaming model, making it more complex to ship a single hotfix without affecting other components.
For users on Excel 2019, 2021, 2024, and Excel Online, Microsoft has not yet provided a timeline for a permanent fix. The company has indicated that it is working on a broader solution, but in the interim, affected users must rely on workarounds that range from the inconvenient to the security-compromising.
The Paste Special Workaround: A Temporary but Functional Alternative
Microsoft has recommended that affected users bypass the broken standard paste operation by using the “Paste Special” feature. To do this, users should open the Home tab, click the Paste drop-down, and select Paste Special. Alternatively, the keyboard shortcut Ctrl+Alt+V opens the Paste Special dialog directly. From there, users can choose among several options: Formula, Formula and number formats, Values, Values and number formats, or Paste Link.
While Paste Special works around the bug, it is not a seamless replacement for the standard Ctrl+V workflow. Users who frequently paste data across multiple cells or who rely on the default paste behavior will find the extra steps disruptive. For power users managing large datasets, the inefficiency compounds rapidly. Still, for those who cannot afford to wait for a permanent fix, it is the safest official workaround available.
The Nuclear Option: Uninstalling KB5002914
Some affected users have reported that uninstalling the KB5002914 security update restores normal copy-and-paste functionality. This approach is effective, but it carries significant risk. KB5002914 was a security update that patched multiple vulnerabilities, including flaws that could allow remote code execution and information disclosure. Removing the update exposes the system to those threats.
For administrators who decide that the productivity loss outweighs the security risk, Microsoft has provided commands to remove the update for each affected Office version. For Office 2016, the command targets the specific patch identifier within the Oarpmany.exe utility. For Office 2019, 2021, and 2024, the process involves rolling back the Click-to-Run client to a pre-update version number. The commands are precise and must be executed from an elevated Command Prompt window.
Office 2016:
"C:\Program Files\Common Files\Microsoft Shared\OFFICE16\Oarpmany.exe" /removereleaseinpatch "{90160000-0012-0000-1000-0000000FF1CE}" "{27882596-A8ED-4382-9C71-6CD2DD19F732}" "1033" "0"
Office 2019:
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /update user updatetoversion=16.0.10417.20197
Office 2021 & 2024:
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /update user updatetoversion=16.0.20326.20132
preprepre
These commands are intended for experienced IT professionals. A misapplication could lead to version mismatches, further instability, or a failure to restore functionality. For individual users without administrative support, uninstalling the update through the Windows Control Panel may be simpler, though it still removes all the security fixes bundled in KB5002914.
What Is the Scope of the Copy-and-Paste Bug in Excel 2016?
The bug manifests as a silent failure during standard paste operations. After copying content from a cell or range, the user presses Ctrl+V or clicks Paste in the ribbon. The source selection remains active, and the destination cells receive no data. No error message appears, no beep sounds, and the application does not crash. The user is left with no indication that the operation has failed unless they visually confirm that the destination remains unchanged.
The same regression also affects autofill and formula dragging. When a user attempts to drag the fill handle to extend a series or copy a formula, the operation either fails silently or produces incorrect results. For professionals working with financial models, data analysis pipelines, or inventory sheets, the cumulative effect is a significant loss of productivity.
Broader Context: Microsoft’s Recent Office Troubles
This is not the first time Microsoft has had to scramble to fix Office functionality broken by a security update. In June 2026, the company addressed an issue that blocked Windows 365 users from downloading and installing the Office suite entirely. That same month, another bug prevented Office for the web users from opening Excel and PowerPoint files. In July, Microsoft fixed a problem that prevented third-party applications from launching Office apps like Word, Excel, PowerPoint, and Access on fully updated Windows systems.
The pattern suggests a recurring tension between Microsoft’s cadence of security updates and the stability of Office application features. Each update must balance the urgency of closing vulnerabilities against the risk of introducing regressions in core functionality. The KB5002914 incident represents a failure in that balance: a security patch that silently broke one of the most universally used features in Excel, without any fallback or warning to the user.
Practical Implications for Enterprise and Individual Users
For enterprise IT administrators, the immediate priority is to assess which of their users are running .msi-based Office 2016 and deploy KB5002655 as soon as possible. For users on other versions, the decision to apply the Paste Special workaround or roll back the security update must be made with an understanding of the security trade-offs. In regulated industries where compliance mandates rapid patching, rolling back a security update may not be an option. Those organizations will need to train users on the Paste Special workflow and accept the productivity hit until Microsoft releases a broader fix.
For individual users and small businesses, the calculus is different. Many home and small-office users run Office 2016 Click-to-Run editions, which are not covered by KB5002655. For them, the Paste Special workaround is the only officially supported path. Alternatively, uninstalling KB5002914 will restore normal function but expose the system to known vulnerabilities. Given that the bug affects only paste operations, autofill, and formula dragging, users who can tolerate the inconvenience of Paste Special may prefer to keep the security update installed.
What the Code Regression Reveals About Microsoft’s Testing Pipeline
A code regression of this nature raises questions about the depth of Microsoft’s testing for security updates. The KB5002914 update was tested against the Office suite, yet it shipped with a bug that breaks a fundamental feature across multiple versions. The fact that the regression was not caught before release suggests that the test suite may not have included comprehensive copy-and-paste scenarios for all Office editions. Alternatively, the bug may have been introduced by a change that was considered low-risk and not subjected to full regression testing.
Microsoft has not disclosed the exact line of code that caused the regression, nor has it explained why the fix was initially limited to Excel 2016. The company’s acknowledgment that it is “aware of some user scenarios impacted by conditional formatting” hints that the underlying issue may be more complex than a simple paste failure. Conditional formatting rules are evaluated during paste operations in some contexts, and a regression in that evaluation could explain the silent failure. For now, users and administrators must rely on incomplete information while Microsoft continues its investigation.
Looking Forward: The Path to a Permanent Solution
The release of KB5002655 for Excel 2016 is a positive step, but it is only a partial solution. Users of Excel 2019, 2021, 2024, and Excel Online remain in limbo. Microsoft has not announced a timeline for a universal fix, and the company’s guidance suggests that the problem may require more extensive changes than a simple hotfix. The affected user base is large, and the frustration is real. Every day that passes without a fix for all versions erodes trust in Microsoft’s ability to ship reliable updates.
For now, the most practical course of action depends on the user’s exact Office version and risk tolerance. Excel 2016 .msi users should install KB5002655 immediately. Click-to-Run users should evaluate whether the Paste Special workaround is sustainable or whether the security trade-off of uninstalling the update is acceptable. And all users should watch the Microsoft 365 admin center and support documentation for announcements of a broader fix. The silent paste failure may be resolved for some, but for the rest, the wait continues with no end date in sight. The incident serves as a stark reminder that even the most trusted software tools are only as reliable as the testing that stands behind their updates.
