Fix Microsoft Defender Detecting Outdated OpenSSL Files in Office
Question details
Users are receiving security alerts from Microsoft 365 Defender regarding vulnerable or outdated OpenSSL DLLs included within Microsoft Office installation packages.
- Product
- Microsoft Office 365
- Device & OS
- not provided
- Scenario
- Running system security scans via Microsoft 365 Defender on a device with Microsoft Office installed.
- Observed behavior
- Defender flags outdated OpenSSL components, such as Salesforce ODBC drivers bundled with Office, and standard reinstallation does not remove or update the vulnerable files.
Verify your active Microsoft Defender alerts and take note of the specific CVE numbers reported. Do not manually delete flagged Office DLL files, as this can severely damage your Office installation and cause applications to crash.
Update Microsoft 365 and Office Security Patches
The safest and most effective way to resolve bundled DLL vulnerabilities is to force an update to apply the latest Microsoft Office security patches.
Since these vulnerable OpenSSL files are bundled directly into the Microsoft Office installation package, Microsoft is responsible for providing updated component files via routine security updates. Manually altering the installation directory is unsupported.
Launch any standard Microsoft Office application, such as Word or Excel.
Click on 'File' in the top-left corner of the ribbon, then select 'Account' (or 'Office Account' depending on your version) from the left-hand menu.
Under the Product Information section, click the 'Update Options' dropdown button.
Select 'Update Now'. Allow Microsoft to download and install the latest security patches, then restart your computer and run a new Defender scan.
Coordinate with IT Security or Microsoft Support
If updates do not clear the Defender alert, professional coordination is required to manage the vulnerability or suppress false positives.
Switch to WPS Office for a Secure and Lightweight Experience
Tired of dealing with bloated installation packages and bundled third-party vulnerabilities? WPS Office is a secure, fast, and lightweight alternative that provides full compatibility with Microsoft Office formats without installing unnecessary background drivers.
- 1. Download the Installer: Visit the official WPS Office website and click the Free Download button for your operating system.
- 2. Install WPS Office: Run the downloaded, lightweight installer file and follow the simple on-screen instructions.
- 3. Open Your Files: Launch WPS Office to instantly open and edit your existing Microsoft Office documents safely.
Frequently Asked Questions
Why does Microsoft Defender flag Microsoft Office files as vulnerable?
Microsoft Office installation packages often bundle third-party components, such as OpenSSL and Salesforce ODBC drivers, to ensure broad feature compatibility. If these bundled files become outdated, Defender's vulnerability scanning will flag them, even though they belong to another Microsoft product's directory.
Can I manually delete the vulnerable OpenSSL DLL files to clear the alert?
It is highly discouraged to manually delete DLL files from the Office installation folder. Doing so can break linked Office components, cause software crashes, or prevent your Office applications from opening entirely.
Will reinstalling Microsoft 365 remove the outdated OpenSSL files?
Typically, no. If the outdated OpenSSL files are part of the current standard installation package distributed by Microsoft, a fresh install will simply place the exact same vulnerable files back onto your system. You must wait for an official patch from Microsoft.
