HowTo-Outlook

A Rollup Update has been released for Outlook 2016. This is a non-security update which contains 8 documented improvements and fixes.

Most notable fixes in this update;

• Assume that you have Outlook and a Skype for Business application installed on a computer with Windows 10 or later versions. When the Skype for Business application automatically starts, a prompt for Skype for Business credentials may appear behind other windows.
• When you accept multiple separate instances of a recurring meeting, and then you synchronize the Calendar folder in Outlook, you notice that sometimes some instances are mistakenly removed from the calendar.
• This update fixes a case where sometimes searching items result in the following error message:
  

  Something went wrong and your search couldn’t be completed.

• When you try to open the “Rules and Alerts” dialog box, the dialog box doesn’t open and you receive the following error message:
  

  The operation failed because of a registry or installation problem. Restart Outlook and try again. If the problem persists, reinstall.

View: Download information for KB4462147

Note: This update can be installed via Microsoft Update and updates Outlook to version 16.0.4810.1000. This update does not apply to Perpetual and Office 365 based installations of Office 2016.

A Rollup Update has been released for Outlook 2013. This is a non-security update which contains 3 documented improvements and fixes.

• Recipients see incorrect message body format in a received Outlook template. This issue occurs if the Outlook template is sent as an attachment when Outlook is connected to Exchange Online.
• Assume that you have Outlook and a Skype for Business application installed on a computer with Windows 10 or later versions. When the Skype for Business application automatically starts, a prompt for Skype for Business credentials appear behind other windows.
• When you try to open the “Rules and Alerts” dialog box, the dialog box doesn’t open and you receive the following error message:
  

  The operation failed because of a registry or installation problem. Restart Outlook and try again. If the problem persists, reinstall.

View: Download information for KB4462141

Note: This update can be installed via Microsoft Update or the Update Now button when you are using Office 2013 Click-To-Run and updates Outlook to version 15.0.5111.1000.

A Rollup Update has been released for Outlook 2010. This is a non-security update which contains the following fix;

• When you try to open the “Rules and Alerts” dialog box, the dialog box doesn’t open and you receive the following error message:
  

  The operation failed because of a registry or installation problem. Restart Outlook and try again. If the problem persists, reinstall.

View: Download information for KB4462182

Note: This update can be installed via Microsoft Update and updates Outlook to version 14.0.7229.5000.

Outlook for Office 365 (Monthly Channel) got a new feature on the last day of January which many have waited for a long time;

• Animated GIFs
  They’ll see what you meme: When text or static images just won’t do, use an animated GIF to make your point. Learn more

Note: Depending on your installation type, this update can be installed via the Microsoft Store or the Update Now button in Outlook itself and updates Outlook to: Version 1901 (Build 11231.20130).

A Security Update has been released for Outlook 2016 Retail, Outlook 2019 and Office 365. It resolves the following vulnerability;

• CVE-2019-0559: Microsoft Outlook Information Disclosure Vulnerability
  An attacker who successfully exploited this vulnerability could gather information about the victim. An attacker could exploit this vulnerability by sending a specially crafted email to the victim.

Based on your release channel, you’ll be updated to the following version;

• Office 365, Outlook 2016 Retail, Outlook 2019 Retail
  Version 1812 (Build 11126.20196)
• Outlook 2019 Volume License
  Version 1808 (Build 10340.20017)
• Office 365 Semi Annual Channel
  Version 1808 (Build 10730.20264)
  Version 1803 (Build 9126-2336)
  Version 1708 (Build 8431.2366)

Note: Depending on your installation type, this update can be installed via the Microsoft Store or the Update Now button in Outlook itself. This update does not apply to msi-based installation of Office 2016.

A Security Update has been released for Outlook 2016. It resolves the following vulnerability;

• CVE-2019-0559: Microsoft Outlook Information Disclosure Vulnerability
  An attacker who successfully exploited this vulnerability could gather information about the victim. An attacker could exploit this vulnerability by sending a specially crafted email to the victim.

This update also contains 14 additional fixes or improvements for non-security issues. Most notable are;

• Adds support for the Do Not Forward policy for meetings so that the meetings can’t be forwarded by attendees.
• A “Blocked external content” warning for Secure/Multipurpose Internet Mail Extensions (S/MIME) email messages that have no external content is displayed.
• When you access the “Conversation History” folder, Outlook 2016 hangs.
• Mail delivery rules stop working. When you try to open the “Manage Rules and Alerts” dialog box, you receive the following error message:
  
  

  The operation failed because of a registry or installation problem. Restart Outlook and try again. If the problem persists, reinstall.

View: Download information for KB4461601

Note: This update can be installed via Microsoft Update and updates Outlook to version 16.0.4795.1000. This update does not apply to Perpetual and Office 365 based installations of Office 2016.

A Security Update has been released for Outlook 2013. It resolves the following vulnerability;

• CVE-2019-0559: Microsoft Outlook Information Disclosure Vulnerability
  An attacker who successfully exploited this vulnerability could gather information about the victim. An attacker could exploit this vulnerability by sending a specially crafted email to the victim.

This update also contains additional fixes for 4 non-security issues;

• After update KB3118388 is applied, Office documents in the Public Folders are unexpectedly opened in the Protected View.
• A “Blocked external content” warning for Secure/Multipurpose Internet Mail Extensions (S/MIME) email messages that have no external content is displayed.
• This update adds support for directly importing .ics files that contain HTML bodies into an Outlook 2013 calendar. You no longer need to first convert the HTML body to Rich Text Format (RTF).
• Mail delivery rules stop working. When you try to open the “Manage Rules and Alerts” dialog box, you receive the following error message:
  
  

  The operation failed because of a registry or installation problem. Restart Outlook and try again. If the problem persists, reinstall.

View: Download information for KB4461595

Note: This update can be installed via Microsoft Update or the Update Now button when you are using Office 2013 Click-To-Run and updates Outlook to version 15.0.5101.1000.

A Security Update has been released for Outlook 2010. It resolves the following vulnerability;

• CVE-2019-0559: Microsoft Outlook Information Disclosure Vulnerability
  An attacker who successfully exploited this vulnerability could gather information about the victim. An attacker could exploit this vulnerability by sending a specially crafted email to the victim.

This update also contains additional fixes for 2 non-security issues;

• A “Blocked external content” warning for Secure/Multipurpose Internet Mail Extensions (S/MIME) email messages that have no external content is displayed.
• Mail delivery rules stop working. When you try to open the “Manage Rules and Alerts” dialog box, you receive the following error message:
  
  

  The operation failed because of a registry or installation problem. Restart Outlook and try again. If the problem persists, reinstall.

View: Download information for KB4461623

Note: This update can be installed via Microsoft Update and updates Outlook to version 14.0.7227.5000.

Security updates have been released for Exchange 2013, Exchange 2016 and Exchange 2019. They resolve the following 2 vulnerabilities;

• CVE-2019-0586: Microsoft Exchange Memory Corruption Vulnerability
  A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. An attacker could then install programs; view, change, or delete data; or create new accounts. Exploitation of the vulnerability requires that a specially crafted email be sent to a vulnerable Exchange server.
• CVE-2019-0588: Microsoft Exchange Information Disclosure Vulnerability
  An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended. To exploit this vulnerability, an attacker would need to be granted contributor access to an Exchange Calendar by an administrator via PowerShell. The attacker would then be able to view additional details about the calendar that would normally be hidden.

View: Description of the security update for Microsoft Exchange Server 2019, 2016, and 2013: January 8, 2019
Download: Security Update For Exchange Server 2013 CU21 (KB4471389)
Download: Security Update For Exchange Server 2016 CU10 (KB4471389)
Download: Security Update For Exchange Server 2016 CU11 (KB4471389)
Download: Security Update For Exchange Server 2019 (KB4471389)

Update Rollup 25 for Exchange 2010 Service Pack 3 is now available. It contains 1 documented new security update and all previously released fixes and security updates for Exchange 2010 SP3. Note that mainstream support for Exchange 2010 has already ended.

• CVE-2019-0588: Microsoft Exchange Information Disclosure Vulnerability
  An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended. To exploit this vulnerability, an attacker would need to be granted contributor access to an Exchange Calendar by an administrator via PowerShell. The attacker would then be able to view additional details about the calendar that would normally be hidden.

View: Description of Update Rollup 25 for Exchange Server 2010
Download: Update Rollup 25 For Exchange 2010 SP3 (KB4468742)