Should you update to Microsoft 365 Apps 2605 build 20026.20168?
No: install Microsoft 365 Apps 2609 build 20430.20182 instead. Microsoft 365 Apps 2605 build 20026.20168 is a security update Microsoft released on 9 Jun 2026 for Windows. It fixes 29 security flaws, 8 rated critical and 21 important by Microsoft.[1] None of them is known to be used in attacks.
It has since been replaced by Microsoft 365 Apps 2606 build 20131.20154, released 14 Jul 2026, which includes all of its fixes. If you’re on an older version, install that instead.
Should you update?
No: install Microsoft 365 Apps 2609 build 20430.20182 instead. Microsoft 365 Apps 2609 build 20430.20182 came out on 13 Oct 2026 and includes every fix in Microsoft 365 Apps 2605 build 20026.20168, so there’s no reason to stop at this one. Software Update offers the newest version your device can run.
Is Microsoft 365 Apps 2605 build 20026.20168 still safe?
Not any more. The 4 updates since, up to Microsoft 365 Apps 2609 build 20430.20182, fix 399 security flaws that Microsoft 365 Apps 2605 build 20026.20168 doesn’t, and each became public the day its fix shipped. Installing it is safe: get it only from Office’s own Update Now (File → Account → Update Options), never from a link in an email, text or pop-up.
What it fixes
Microsoft lists 29 security flaws, 8 rated critical and 21 important by Microsoft.[1] The 29 critical and important ones are:
| Flaw | Severity | What Microsoft calls it |
|---|---|---|
CVE-2026-45456 | Critical | Microsoft Outlook and Word Remote Code Execution Vulnerability |
CVE-2026-45458 | Critical | Microsoft Outlook and Word Remote Code Execution Vulnerability |
CVE-2026-45460 | Critical | Microsoft Office Information Disclosure Vulnerability |
CVE-2026-45461 | Critical | Microsoft Office Remote Code Execution Vulnerability |
CVE-2026-45463 | Critical | Microsoft Office Remote Code Execution Vulnerability |
CVE-2026-45472 | Critical | Microsoft Office Remote Code Execution Vulnerability |
CVE-2026-45474 | Critical | Microsoft Office Remote Code Execution Vulnerability |
CVE-2026-47635 | Critical | Microsoft Outlook and Word Remote Code Execution Vulnerability |
CVE-2026-21530 | Important | Windows Rich Text Edit Elevation of Privilege Vulnerability |
CVE-2026-44817 | Important | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2026-44818 | Important | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2026-44819 | Important | Microsoft Office Remote Code Execution Vulnerability |
CVE-2026-44820 | Important | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2026-44821 | Important | Microsoft Office Information Disclosure Vulnerability |
CVE-2026-44822 | Important | Microsoft Excel Information Disclosure Vulnerability |
CVE-2026-44823 | Important | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2026-44824 | Important | Microsoft Office Remote Code Execution Vulnerability |
CVE-2026-45455 | Important | Microsoft Excel Information Disclosure Vulnerability |
CVE-2026-45457 | Important | Microsoft Word Remote Code Execution Vulnerability |
CVE-2026-45459 | Important | Microsoft Excel Security Feature Bypass Vulnerability |
CVE-2026-45466 | Important | Microsoft Word Information Disclosure Vulnerability |
CVE-2026-45469 | Important | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2026-45471 | Important | Microsoft Word Remote Code Execution Vulnerability |
CVE-2026-45475 | Important | Microsoft Office Remote Code Execution Vulnerability |
CVE-2026-45485 | Important | Microsoft Office Information Disclosure Vulnerability |
CVE-2026-45486 | Important | Microsoft Word Remote Code Execution Vulnerability |
CVE-2026-45643 | Important | Microsoft Word Remote Code Execution Vulnerability |
CVE-2026-45645 | Important | Microsoft Office Remote Code Execution Vulnerability |
CVE-2026-47293 | Important | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
How to update, and how long it takes
Five to fifteen minutes. Your Office apps close while it installs.
- Open Word (or Excel or PowerPoint) and click File, then Account.In Outlook it’s File → Office Account.
- Click Update Options, then Update Now.Office downloads the update in the background. Close your Office apps when it asks; they reopen when it’s done.
To check it worked: File → Account in Word or Excel: under About it shows e.g. Version 2609 (Build 20430.20182 Click-to-Run). It should say 2606 build 20131.20154 or later.
Before and after
- After: Microsoft 365 Apps 2606 build 20131.20154, 14 Jul 2026, 78 security flaws
- Microsoft 365 Apps updates, every release and the latest version
- Updates, the latest version of everything HARD tracks
References
- ^ Microsoft. “Release notes for Microsoft Office security updates, June 9, 2026”, 9 Jun 2026.