However, we recommend that admins upgrade the existing VBA signatures to the V3 signature as soon as possible after they upgrade Office to the listed versions. We recommend that organizations apply the V3 signature to all macros to eliminate the risk of tampering.īy default, to ensure backward compatibility, VBA files that have existing signatures will continue to work, and newly created VBA files that have the V3 signature will also be opened and run in earlier versions of Office or in the non-updated clients.

Description of the security update for Office 2016: Ma(KB4493225).Description of the security update for PowerPoint 2016: Decem(KB4484393).Description of the security update for Excel 2016: Decem(KB4486754).Microsoft Installer (.msi)-based editions of Office 2016 that have the following updates or later versions of updates:.Retail versions of Office 2016 Click-to-Run editions and Office 2019 version 2102 (build 1.20266) and later versions.Volume-licensed versions of Office 2019 version 1808 (build 10372.20060) and later versions.Microsoft 365 version 2102 (build 1.20266) and later versions of the current channel.The V3 signature is available in the following products: To enhance the security of the Office VBA macro project signing, Microsoft provides a more secure version of VBA project signature scheme: V3 signature. Therefore, we recommend that users apply the security updates that are listed in Microsoft Common Vulnerabilities and Exposures CVE-2020-0760. This vulnerability might enable a malicious user to tamper with a signed VBA project without invalidating its digital signature. Microsoft has discovered a vulnerability in Office Visual Basic for Applications (VBA) macro project signing.

Yu Kaijun, Senior Program Manager, Microsoft ChinaĪpplies to: Microsoft 365, Office 2019, Office 2016

Word 2016 upgrade macros