Update Rollup 25 for Exchange 2010 Service Pack 3 is now available. It contains 1 documented new security update and all previously released fixes and security updates for Exchange 2010 SP3. Note that mainstream support for Exchange 2010 has already ended.
- CVE-2019-0588: Microsoft Exchange Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended. To exploit this vulnerability, an attacker would need to be granted contributor access to an Exchange Calendar by an administrator via PowerShell. The attacker would then be able to view additional details about the calendar that would normally be hidden.
View: Description of Update Rollup 25 for Exchange Server 2010
Download: Update Rollup 25 For Exchange 2010 SP3 (KB4468742)
