Microsoft Security Update KB5002914 Breaks Excel Copy-Paste
A September security patch causes the paste function to fail silently across multiple versions of Excel, forcing a choice between stability and security.
Microsoft has confirmed that a recent security update is causing the copy and paste functionality to fail silently in several versions of Microsoft Excel. The bug leaves users unable to move data between cells, creating a significant disruption for those relying on the software for professional data manipulation.
The issue stems from update KB5002914, released on September 8, 2026, as part of the monthly Patch Tuesday cycle. According to Microsoft, the bug affects Excel 2016, 2019, 2021, and 2024. When the failure occurs, the source cell remains selected and the destination cell remains unmodified. Crucially, the software provides no error message or audible alert to notify the user that the operation has failed.
Security vs. Stability
KB5002914 was deployed as a critical security measure to resolve 30 vulnerabilities within Excel. These include high-risk flaws such as information disclosure, specifically citing CVE-2026-81399. The update is designed to protect MSI-based installations of the perpetual Office releases, ensuring that legacy versions of the software remain secure against modern exploits.
Industry Implications
This failure creates a difficult dilemma for IT administrators and power users. Because the bug affects core functionality, the immediate instinct for many is to roll back the update to restore productivity. However, doing so re-exposes systems to 30 known security vulnerabilities. This forces organizations to choose between maintaining a stable working environment and protecting their infrastructure from potential cyberattacks.
Current Status
Microsoft acknowledged the flaw in its official update description dated September 8, 2026, and stated that it is currently researching a fix. While the company has confirmed the existence of the bug across the 2016 through 2024 versions of the software, a timeline for a corrective patch has not yet been provided. Users are currently left to balance the risks of system vulnerability against the loss of essential spreadsheet tools. This gap in functionality highlights the ongoing tension between rapid security deployment and the stability of legacy enterprise software, where a single patch can inadvertently disable the primary utility of a tool used by millions of professionals worldwide.