On February 14, 2023, Microsoft released new security updates rated ‘Important’ for:
Exchange 2019 CU11/CU12
Exchange 2016 CU23
Exchange 2013 CU23
Please note that Security Updates have been released for the last supported versions of Exchange 2013 and Exchange 2016, which in both cases is Cumulative Update 23. Only for Exchange 2019 have current and previous release SUs been released.
The latest SUs address the following vulnerabilities:
All vulnerabilities are rated ‘Important’ and are listed in the ‘Remote Code Execution’ category. Although no exploits in the wild have been detected at the time of writing, it is important that you install these updates soon (after testing).
Exchange 2013 support ends this April. After April 2023, security updates will no longer be released for Exchange 2013. If you are still running Exchange 2013, then you must upgrade to Exchange 2016, Exchange 2019 or Exchange Online as soon as possible!
Before installing these updates, test them thoroughly in your test environment.
These updates are also available via Windows Update. Please note that the initial release contained a small bug: after installation it reported a wrong build number. This bug issue was fixed the next day.
Security Updates are cumulative. This means that this SU contains all fixes that were released in previous SUs for this CU version.
An Exchange Management Tools server does not need this SU, but for consistency I recommend to install it.
Want to learn more about Exchange Monitoring & Reporting?
How do you ensure vital business communication, such as email, stays up and running? How do you demonstrate to senior management that additional resources are needed to meet growing demand or that service levels are being met? ENow makes your job easier by putting everything you need into a single and concise OneLook dashboard, instead of forcing you to use fragmented and complicated tools for monitoring and reporting.
Easy to deploy and intuitive to use, ACCESS YOUR FREE 14-DAY TRIAL and combine all key elements for your Exchange monitoring and reporting to keep your messaging infrastructure up and running like a pro!
Consolidated dashboard view of messaging environments health
Automatically verify external Mail flow, OWA, ActiveSync, Outlook Anywhere
Mail flow queue monitoring
DAG configuration and failover monitoring
Microsoft Security Patch verification
200+ built-in, customizable reports, including: Mailbox size, Mail Traffic, Quota, Storage, Distribution Lists, Public Folders, Database size, OWA, Outlook version, permissions, SLA and mobile device reports
Jaap is a Microsoft MVP for Office Apps and Services. Jaap is an independent consultant, primarily focusing on Exchange server, Skype for Business and Office 365.