You seem to be a business or oganisation. Then it's a question for your Microsoft account manager. Most visitors here are private person using Windows Update, and won't experience this.
Just recently all of our Office installed computers decided to get all of the Office patches they were missing, going back to 2016 or earlier.
We don't use Windows Update for this, and it is set to disabled.
We patch using Ivanti/Patchlink/HEAT EMSS, but all of these patches are disabled. There also aren't any listings in the log for these.
We don't use WSUS, and we don't use the update feature in SCCM.
These machines appear to be going out to the internet to pick up these patches.
This i happening with Windows 10/Office 2016 and Windows 7/Office 2010.
It is so strange it is only doing this for Office patches.
Any way to figure out how/why this is happening, and how to stop it?