IT SBIT Services
Schneeberger
DEEN
Known update issues

Excel 2016-2024: Copy/paste broken after September 2026 Office update (KB5002914)

WorkaroundKnown issueCommunity reportCheck script

← All entries

Community report – not yet confirmed by the vendor: users or trade media report on it (forums, Q&A sites, Reddit, web research), but the vendor has not confirmed the issue (yet). Use this information with caution.

Summary

Users report that copy, paste and drag-fill of formulas in Excel fail after the Office security update KB5002914 of September 2026. The problem does not occur on all systems. This is reported by users and trade media, not yet confirmed by the vendor. Uninstalling the update is reported to restore copy/paste.

Symptoms

Copying, pasting and drag-filling of formulas in Excel fail on some systems. No error codes have been reported.

Affected

  • Excel 2016 to 2024 (as reported)
  • Systems with the Office security update KB5002914 (September 2026) installed
  • Not all systems are affected; the cause of the difference is unknown

Workaround

  1. Uninstalling KB5002914 is reported by users to restore copy/paste. This is unconfirmed and not an official vendor workaround; uninstalling a security update removes its protection.

Fix

Not fixed yet. No vendor statement or fixed build is available.

Recommendation

Check whether affected users have KB5002914 installed before taking action. If you roll back the update, do so only on affected systems, for a limited time and after a risk assessment, as it removes security fixes. Monitor Microsoft's Office release notes for an official statement or fix. Where possible, test Office updates with a pilot group before wide rollout.

Check script: am I affected? (PowerShell, read-only)

Check: Excel 2016-2024: Copy/paste broken after September 2026 Office update (KB5002914)

What it checks
Checks whether the update named in the community reports is installed on this device. It changes nothing, writes no file and needs no internet.
What to do if affected
Compare the symptoms with the entry; watch for a statement from the vendor before changing anything.

Community report: not yet confirmed by the vendor. The check is based only on the details of the reports (e.g. the update named) and is an indication, not proof.

Result and exit code: AFFECTED = 5, NOT AFFECTED = 0, FIXED – solution installed = 0, UNCLEAR = 6, error = 1 (as an Intune detection script: 1 = affected, otherwise 0).

What exactly happens?

  • Only reads – changes nothing, writes no file, needs no internet and asks no questions.
  • Checks: update KB5002914 installed
  • Reports the result with one line per condition and the next step.

What is checked

  • Indication of being affected: update KB5002914 installed

How to use the script – step by step

  1. Download: on the entry page, read the terms and conditions (section "Free scripts") and the disclaimer, tick "I accept" and click "Download script". The file is saved in your "Downloads" folder.
  2. Open PowerShell: press the Start key, type "PowerShell", press Enter. No administrator rights are needed – only if the result reports conditions as "not checkable", open PowerShell as administrator (right-click "Windows PowerShell" › "Run as administrator").
  3. Change to the Downloads folder (type or paste the command, then press Enter):
    cd "$env:USERPROFILE\Downloads"
  4. Compare the checksum: the command shows a long string. It must be exactly the same as "SHA-256" on the entry page (D2A31E6302EAB55BC4392406D3B59015E1BD96C7CD6816CB3897D9926101483D). If it differs, delete the file and do not run it.
    (Get-FileHash .\ITSB-Check-excel-copy-paste-broken-after-the-september-2026-office-secu-v1.ps1 -Algorithm SHA256).Hash
  5. Unblock the file (Windows marks downloaded files). Alternatively in Explorer: right-click the file › Properties › tick "Unblock" at the bottom › OK.
    Unblock-File .\ITSB-Check-excel-copy-paste-broken-after-the-september-2026-office-secu-v1.ps1
  6. Allow scripts for this PowerShell window only. This only applies until you close the window – the computer's setting stays unchanged. If PowerShell asks, confirm with "Y".
    Set-ExecutionPolicy -Scope Process -ExecutionPolicy Bypass
  7. Run the script. It only checks: it changes nothing, writes no file and needs no internet.
    .\ITSB-Check-excel-copy-paste-broken-after-the-september-2026-office-secu-v1.ps1
  8. Read the result (at the bottom): "AFFECTED" – follow the steps under "what to do" (e.g. install the update or use the entry's fix script). "NOT AFFECTED" – nothing to do. "FIXED – solution installed" – nothing to do; you can undo a workaround you applied earlier. "UNCLEAR" – not everything could be checked: compare the details in the entry manually.
  9. Download without a browser (RMM, software distribution): the address needs "&agb=1". This means the person deploying the script accepts the terms and conditions (section "Free scripts") and the disclaimer on behalf of their organisation.
    Invoke-WebRequest "https://www.it-sb.ch/ki-api/?a=dl&f=ITSB-Check-excel-copy-paste-broken-after-the-september-2026-office-secu-v1.ps1&agb=1" -OutFile ".\ITSB-Check-excel-copy-paste-broken-after-the-september-2026-office-secu-v1.ps1"
  10. For many devices (RMM, scheduled task): command below, exit codes 0 = not affected or fixed, 5 = affected, 6 = unclear, 1 = error. Upload it as the detection script of an Intune remediation ("Run script in 64-bit PowerShell" = Yes): there it automatically reports 1 = affected, otherwise 0 (manually with -Intune).
    powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\ITSB-Check-excel-copy-paste-broken-after-the-september-2026-office-secu-v1.ps1
    powershell.exe -NoProfile -ExecutionPolicy Bypass -File .\ITSB-Check-excel-copy-paste-broken-after-the-september-2026-office-secu-v1.ps1 -Intune
File
ITSB-Check-excel-copy-paste-broken-after-the-september-2026-office-secu-v1.ps1 · no administrator rights needed
Version
1 · Date 1 Nov 2026 · 25 KB
SHA-256
D2A31E6302EAB55BC4392406D3B59015E1BD96C7CD6816CB3897D9926101483D
Downloads
0

Use at your own risk – no warranty, no liability if anything does not work or is wrong. Test before use and make a backup. Our terms and conditions (free scripts) apply. Generated automatically from the vendor’s statement and checked (rules, second AI review).

Download without a browser (RMM, software distribution): address with "&agb=1" – this means the person deploying the script accepts the terms on behalf of their organisation: https://www.it-sb.ch/ki-api/?a=dl&f=ITSB-Check-excel-copy-paste-broken-after-the-september-2026-office-secu-v1.ps1&agb=1

Reports from the community and trade media

Reports from forums, Q&A sites, Reddit and trade media – linked only, without the names of the authors; the vendor’s statement is authoritative.

Sources

Compiled from community reports and web research and translated with AI (Claude) – not yet confirmed by the vendor. The vendor’s statements are authoritative. Updated 2 Nov 2026, 00:36.

Where the information comes from

We continuously read the vendors’ official sources, community reports and trade media and summarise them in our own words, with a link to the source:

  • Microsoft: Windows release health (Windows 10/11, Server 2016 to 2025), Windows message center, known issues of Microsoft 365 Apps (Outlook, Excel, Word, PowerPoint), Edge, Intune, Autopilot, Windows 365 and Entra Connect, Microsoft KB articles with timelines, Exchange and Windows IT Pro blogs, optionally Microsoft 365 service health and message center
  • other vendors: Veeam KB, Citrix (known issues), Ubuntu and Debian (regressions), Broadcom (VMware), Fortinet, Cisco, Mozilla, Let’s Encrypt
  • community (title, short excerpt and link only, without the names of the authors): Microsoft Q&A, Microsoft Tech Community (discussions), Veeam R&D Forums, Eleven Forum
  • targeted web research with AI (Claude), e.g. on the updates of the month – this also finds discussions on Reddit and in forums; such entries are labelled as community reports until the vendor confirms them
  • early warning from trade media (title and link only): Born’s Tech and Windows World, BleepingComputer, AskWoody, Windows Latest, Windows Central, gHacks, The Windows Club, Deskmodder, Dr. Windows, WindowsArea, Frankys Web, heise online

Summary and translation with AI (Claude by Anthropic) – without any data of visitors.

Affected? We can help.

We check whether your systems are affected, apply workarounds properly and plan for dated changes in good time.

Get in touchRSS feed