HowTo-Outlook

Cumulative Update 20 for Exchange 2013 is now available. It contains 14 documented new fixes or improvements, and all previously released fixes and security updates for Exchange 2013 as well as the latest DST updates.

Notable improvements and fixes are;

• TLS 1.2 is now supported.
• KB4058379 All cross-forest meeting updates have to be accepted again in Exchange Server 2016 and 2013.
• KB4073093 Save issues occur when you use the plain Text Editor in OWA of Exchange Server 2013.
• KB4073096 Emails sent from a shared mailbox aren’t saved in Sent Items when MessageCopyForSentAsEnabled is True.

This release includes no new updates to the Active Directory Schema.

Download: Cumulative Update 20 for Exchange Server 2013 (KB4037221)
Download: Exchange Server 2013 CU20 UM Language Packs
View: Description of Cumulative Update 20 for Exchange Server 2013
View: Blog post of the Exchange Team about CU20 for Exchange Server 2013

Update Rollup 20 for Exchange 2010 Service Pack 3 is now available. It contains 2 security fixes and all previously released fixes and security updates for Exchange 2010 SP3 as well as the latest DST updates. Note that mainstream support for Exchange 2010 has already ended.

• CVE-2018-0924 and CVE-2018-0940
  The vulnerability could allow elevation of privilege or spoofing in Microsoft Exchange Server via OWA if an attacker sends an email message that has a specially crafted attachment to a vulnerable Exchange server.

View: Description of Update Rollup 20 for Exchange Server 2010
Download: Update Rollup 20 For Exchange 2010 SP3 (KB4073537)

A Rollup Update has been released for Outlook 2016. This is a non-security update which contains 7 documented improvements and fixes.

Most notable fixes in this update;

• Outlook may fail to use the secondary Exchange Web Service (EWS) URL that’s specified by the Exchange Administrator if the primary URL doesn’t work.
• You cannot copy and paste an SMTP address that’s from an external recipient to the To, Cc and Bcc lines of a new message.
• When you set up some email accounts, Outlook may crash if the Exchange Autodiscover settings aren’t available.

Office 365 subscribers can now also see other people’s responses to a meeting request, even if you aren’t the organizer.

View: Download information for KB4018296

Note: This update can be installed via Microsoft Update or the Update Now button when you are using Office 365 and updates Outlook to version 16.0.4666.1000 (msi-based installation) or version 1802 build 9029.2167 (Office 365 based installation).

A Rollup Update has been released for Outlook 2010. It resolves an issue that was introduced in the January 2018 update (KB4011273) which causes Outlook to display the following error when used on Windows XP and Windows Server 2003.

• CompareStringOrdinal not found in dynamic link library KERNEL32.dll

View: Download information for KB4018314

Note: This update can be installed via Microsoft Update and updates Outlook to version 14.0.7194.5000.

A Security Update has been released for Outlook 2016. It resolves the vulnerabilities mentioned in CVE-2018-0850 and CVE-2018-0852, which could allow remote code execution via a specially crafted Office file. It also contains 5 nonsecurity improvements and fixes.

Most notable additional fixes in this update;

• Fixes an issue in which some attachments to plain text messages are removed when you forward the message.
• When you drag an email message to a location outside Outlook by right-clicking and then selecting “Move here”, Outlook copies the message instead of moving it.
• When you try to open a message that contains external content, Outlook 2016 freezes if you don’t have Internet access.

View: Download information for KB4011682

Note: This update can be installed via Microsoft Update or the Update Now button when you are using Office 365 and updates Outlook to version 16.0.4654.1000 (msi-based installation) or 16.0.9001.2171 (Office 365 based installation) or 16.0.8431.2215 (Office 365 Semi-Annual Channel installation) or 16.0.8201.2258 (Deferred Channel).

A Security Update has been released for Outlook 2013. It resolves the vulnerabilities mentioned in CVE-2018-0850 and CVE-2018-0852, which could allow remote code execution via a specially crafted Office file. It also contains 6 nonsecurity improvements and fixes.

Most notable additional fixes in this update;

• Allows you to disable Exchange Active Sync (EAS) account creation via the EnableEASAccountCreation Registry value.
• You see that the location disappears from meeting requests when you add recipients as attendees.
• Outlook 2013 may crash when you change to Calendar view or you work in calendar.

View: Download information for KB4011697

Note: This update can be installed via Microsoft Update or the Update Now button when you are using Office 365 and updates Outlook to version 15.0.5007.1000.

A Security Update has been released for Outlook 2010. It resolves the vulnerabilities mentioned in CVE-2018-0850 and CVE-2018-0852, which could allow remote code execution via a specially crafted Office file.

View: Download information for KB4011711

Note: This update can be installed via Microsoft Update and updates Outlook to version 14.0.7194.5000.

A Security Update has been released for Outlook 2007. It resolves the vulnerabilities mentioned in CVE-2018-0850 and CVE-2018-0852, which could allow remote code execution via a specially crafted Office file.

View: Download information for KB4011200

Note: This update can be installed via Microsoft Update and updates Outlook to version 12.0.6785.5000.