"Although users try to paste content, the source remains selected and the destination is unmodified," Microsoft said in an updated support document.
Microsoft confirms a silent copy-and-paste failure in Excel
Microsoft has acknowledged that its September 2026 security update KB5002914 can cause copy-and-paste operations to fail silently in Microsoft Excel. The company said the problem affects Microsoft Excel 2024, 2021, 2019, and 2016, and that when the bug appears users receive no audible or visual indication — no beep, no error message — that the paste operation has not completed.
Symptoms reported: paste, autofill, and dragging do not complete
The observable symptom described by Microsoft and reported by affected users is straightforward: attempts to paste content leave the original (source) selection unchanged and do not modify the intended destination cell or range. The same update has been associated with failures involving autofill and formula dragging in Excel, producing an experience in which expected edits simply do not take effect.
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scrambleA practical rollback: how users restore functionality
Users who reported recovery after removing KB5002914 say uninstalling the update restores normal copy-and-paste behavior. Microsoft’s support-oriented guidance — echoed by impacted users — lists specific commands to reverse the update depending on the Office installation and version installed on the device. The commands below are provided verbatim in the advisory:
- Office 2016:
"C:\Program Files\Common Files\Microsoft Shared\OFFICE16\Oarpmany.exe" /removereleaseinpatch "{{90160000-0012-0000-1000-0000000FF1CE}}" "{{27882596-A8ED-4382-9C71-6CD2DD19F732}}" "1033" "0"
- Office 2019:
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /update user updatetoversion=16.0.10417.20197
- Office 2021 & 2024:
"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe" /update user updatetoversion=16.0.20326.20132
Microsoft said it is researching the issue and will update the support document when more information becomes available.
Where KB5002914 fits into September 2026 Patch Tuesday and follow-on updates
Microsoft released KB5002914 last week as part of its September 2026 Patch Tuesday bundle. The update was published to address a long list of remote code execution and information disclosure vulnerabilities. In the weeks prior to this issue, Microsoft had published multiple fixes for Office and related services: in July it fixed a problem preventing third-party applications from launching Office apps or opening documents on up-to-date Windows systems, and one month earlier it addressed a bug that blocked Office for the web users from opening Excel and PowerPoint files as well as an issue that prevented Windows 365 users from downloading and installing the Office suite.
Separately, on Monday Microsoft released emergency out-of-band updates to fix Remote Desktop Services failures caused by the September security updates, and also addressed Hyper-V and USB audio problems affecting some Windows versions.
How affected Excel users, IT administrators, and enterprises are responding
- Affected Excel users: individuals experiencing the silent paste failures have reported that uninstalling KB5002914 restores functionality. Users observing unexpected behavior in paste, autofill, or dragging operations are following the provided rollback commands for their Office edition.
- IT administrators: administrators are weighing the trade-off between restoring Excel functionality for users and keeping the September security fixes in place; many are using the documented removal commands for specific Office versions to target machines where the bug is encountered.
- Enterprises and managed environments: organizations with large deployments are monitoring Microsoft’s support article and the company’s promise to post further information, and are likely to coordinate testing and staged rollbacks where the update interferes with critical Excel workflows.
Microsoft’s public acknowledgement frames this as a targeted functional regression introduced by KB5002914; the company is continuing to investigate and has committed to updating its support documentation when it has more information. For now, affected users and IT teams have a documented, version-specific rollback path that many report restores copy-and-paste behavior.
