February 2023 Exchange Security Updates

On February 14, 2023, Microsoft released new security updates rated ‘Important’ for:

• Exchange 2019 CU11/CU12
• Exchange 2016 CU23
• Exchange 2013 CU23

Please note that Security Updates have been released for the last supported versions of Exchange 2013 and Exchange 2016, which in both cases is Cumulative Update 23. Only for Exchange 2019 have current and previous release SUs been released.

The latest SUs address the following vulnerabilities:

• CVE-2023-21529
• CVE-2023-21706
• CVE-2023-21707
• CVE-2023-21710

All vulnerabilities are rated ‘Important’ and are listed in the ‘Remote Code Execution’ category. Although no exploits in the wild have been detected at the time of writing, it is important that you install these updates soon (after testing).

For downloads and more information you can go to:

And some important closing notes:

• Exchange 2013 support ends this April. After April 2023, security updates will no longer be released for Exchange 2013. If you are still running Exchange 2013, then you must upgrade to Exchange 2016, Exchange 2019 or Exchange Online as soon as possible!
• Before installing these updates, test them thoroughly in your test environment.
• These updates are also available via Windows Update. Please note that the initial release contained a small bug: after installation it reported a wrong build number. This bug issue was fixed the next day.
• Security Updates are cumulative. This means that this SU contains all fixes that were released in previous SUs for this CU version.
• An Exchange Management Tools server does not need this SU, but for consistency I recommend to install it.

Want to learn more about Exchange Monitoring & Reporting?

How do you ensure vital business communication, such as email, stays up and running? How do you demonstrate to senior management that additional resources are needed to meet growing demand or that service levels are being met? ENow makes your job easier by putting everything you need into a single and concise OneLook dashboard, instead of forcing you to use fragmented and complicated tools for monitoring and reporting.

Easy to deploy and intuitive to use, ACCESS YOUR FREE 14-DAY TRIAL and combine all key elements for your Exchange monitoring and reporting to keep your messaging infrastructure up and running like a pro!

PRODUCT HIGHLIGHTS

• Consolidated dashboard view of messaging environments health
• Automatically verify external Mail flow, OWA, ActiveSync, Outlook Anywhere
• Mail flow queue monitoring
• DAG configuration and failover monitoring
• Microsoft Security Patch verification
• 200+ built-in, customizable reports, including: Mailbox size, Mail Traffic, Quota, Storage, Distribution Lists, Public Folders, Database size, OWA, Outlook version, permissions, SLA and mobile device reports