HowTo-Outlook

Microsoft has released the February 2024 feature update of Outlook for Microsoft 365 Apps in the Current Channel.

Just like last month, there is not a single new feature for any of the Office applications but quite a number of fixes.

There are 8 fixes for Outlook and 2 fixes that are also related to Outlook. One of these fixes is for Word and the other for general Office components.

• We fixed an issue that caused Outlook to exit unexpectedly when expanding a conversation in the search results from a search of “All Mailboxes.”
• We fixed an issue that caused Outlook to unexpectedly exit shortly after launching for some users.
• We fixed an issue that caused 3rd party MAPI applications to be unable to retrieve licensing information.
• Fixed an issue with mail view appearing blank for an extended time when switching folders.
• We fixed an issue that caused Outlook to exit unexpectedly when attaching an Outlook item (such as an email message) from the insert tab.
• We fixed an issue that caused Outlook to exit unexpectedly when adding an attachment in some scenarios.
• We fixed an issue where a Meeting window would not close and the meeting would not get added to the organizer’s calendar if an image had previously been added into the body of the message and the organizer was attempting to reopen the meeting and add new attendees.
• We fixed an issue that caused users to be unable to synchronize email with the Exchange ActiveSync protocol.
• We fixed an issue where the font would switch from Aptos to Times New Roman when typing in a new email. (Word)
• We fixed an issue that caused event based add-ins to be unable to display the Info Bar in Win32 Outlook. (Office)

Note: Depending on your installation type, this update can be installed via the Update Now button in Outlook or the Microsoft Store and updates Outlook to: Version 2402 (Build 17328.20142).

The February security and rollup update has been made available for all Click-to-Run installations of Outlook 2016, Outlook 2019, Outlook 2021 and Outlook as part of a Microsoft 365 subscription.

It contains 6 security updates for Outlook (2), Visio (1), Word (1), and Office (2). The details about the Outlook vulnerabilities can be found below;

• CVE-2024-21378: Microsoft Outlook Remote Code Execution Vulnerability
  • This vulnerability is currently not publicly disclosed nor exploited.
  • Exploitation of the vulnerability requires that a user open a specially crafted file.
  • The Preview Pane is an attack vector.
  • The Exploitability Assessment is rated: Exploitation More Likely.

• CVE-2024-21402: Microsoft Outlook Remote Code Execution Vulnerability
• This vulnerability is currently not publicly disclosed nor exploited.
• If the attacker successfully exploits the vulnerability, the attacker would gain the rights of the user that is running the affected application.
• The Exploitability Assessment is rated: Exploitation Less Likely.

In addition, it contains 1 non-security fix related to Outlook Current Channel Version 2401, and 7 fixes related to Outlook Monthly Enterprise Version 2312.

• 2401
• We fixed an issue where the App Search bar was unexpectedly appearing above the message list in Outlook 2016 and Outlook 2019.
• 2312
• We fixed an issue that caused Outlook to exit unexpectedly when opening embedded mail attachments in another application.
• We fixed an issue where the list of invalid recipients was showing duplicates.
• We fixed an issue where Mail Tips were not showing for attachments.
• We fixed an issue that caused Data Loss Prevention features to be unexpectedly disabled when disabling Optional Connected Experiences.
• We fixed an issue where Skype for Business was shutting down unexpectedly at start up.
• We fixed an issue where the message list was blank when switching between the “Focused” and “Other” views.
• We fixed an issue that caused Outlook to exit unexpectedly after discarding an edit to a received single instance meeting.

Based on your release channel, you’ll be updated to the following version;

• Microsoft 365 Apps, Outlook 2016 Retail, Outlook 2019 Retail, Outlook 2021 Retail
  Version 2401 (Build 17231.20236)
• Monthly Enterprise
  Version 2312 (Build 17126.20190)
  Version 2311 (Build 17029.20178)
• Semi-Annual Enterprise (Preview)
  Version 2308 (Build 16731.20550)
• Semi-Annual Enterprise
  Version 2308 (Build 16731.20550)
  Version 2302 (Build 16130.20916)
  Version 2208 (Build 15601.20870) 
• Outlook LTSC 2021
  Version 2108 (Build 14332.20637)
• Outlook 2019 Volume Licensed
  Version 1808 (Build 10407.20032)

Note: Depending on your installation type, this update can be installed via the Update Now button in Outlook itself or the Microsoft Store. This update does not apply to msi-based installations of Office 2016.

Cumulative Update 14 for Exchange 2019 is now available. With the new release model, it is officially called; The 2024 H1 Cumulative Update (CU) for Exchange Server 2019.

Exchange 2019 CU14 includes the following major changes;

• Extended Protection enabled by default
  Originally released in August 2022, Exchange Server Extended Protection support will now be enabled by default. This applies to the server on which it is installed and will happen when running setup.
  As setup does not validate EP readiness, make sure you run the Exchange Server Health Checker script and verify the Prerequisites for enabling Extended Protection on Exchange server.
  To prevent setup from enabling EP, run setup from a command line wit either the /DoNotEnableEP or /DoNotEnableEPFEEWS switch.
• CVE-2024-21410 information
  To address CVE-2024-21410 (which got released today), you’ll need to enable Extended Protection. This also applies to any previous version of CU of Exchange 2019 as well as Exchange 2016 and even Exchange 2013 and not just Exchange 2019 CU14. For more information see; Exchange Server support for Windows Extended Protection.
• .NET Framework 4.8.1 support on Windows Server 2022

There are 18 additional fixes documented for this release. A few notable ones are;

• KB5035443: Read receipts are returned if ActiveSyncSuppressReadReceipt is “True” in Exchange Server 2019
• KB5035453: Issues in Exchange or Teams when you try to delegate information
• KB5035455: MSExchangeIS stops responding and returns “System.NullReferenceExceptions” multiple times per day
• KB5035494: Modern attachment doesn’t work when web proxy is used in Exchange Server 2019
• KB5035495: OWA displays junk operations even if junk mail reporting is disabled
• KB5035542: Remote equipment and room mailboxes can now be managed through EAC
• KB5035617: Transport rules aren’t applied to multipart or alternative messages

This release does not include new updates to the Active Directory Schema for Exchange 2019.

Exchange 2019 is scheduled for later this year and will include support for TLS 1.3.

Exchange 2019: CU14 KB5035606 – Download
View: Blog post of the Exchange Team about CU14 for Exchange Server 2019

Note: Exchange 2016 has reached its Extended Support phase and CU23 was the last CU for it. This means that from now on, it will only receive Security Updates.

A Security Update has been released for Outlook 2016. It resolves the following vulnerability;

• CVE-2024-21378: Microsoft Outlook Remote Code Execution Vulnerability
  • This vulnerability is currently not publicly disclosed nor exploited.
  • Exploitation of the vulnerability requires that a user open a specially crafted file.
  • The Preview Pane is an attack vector.
  • The Exploitability Assessment is rated: Exploitation More Likely.

View: Download information for KB5002543

Note: This update can be installed via Microsoft Update and updates Outlook to version 16.0.5430.1000. This update does not apply to Perpetual (Retail) and Microsoft 365 based installations of Office 2016.

Microsoft has released the January 2024 feature update of Outlook for Microsoft 365 Apps in the Current Channel.

However, this time there is not a single new feature for any of the Office applications but just a couple of fixes.

There is 1 only fix for Outlook and 1 fix for OneNote that is also related to Outlook.

• We fixed an issue that caused Outlook to exit unexpectedly after discarding an edit to a received single instance meeting.
• We fixed an issue where meetings spanning a full day were appearing in meeting details on the following day. (OneNote)

Note: Depending on your installation type, this update can be installed via the Update Now button in Outlook or the Microsoft Store and updates Outlook to: Version 2401 (Build 17231.20182).

The January security and rollup update has been made available for all Click-to-Run installations of Outlook 2016, Outlook 2019, Outlook 2021 and Outlook as part of a Microsoft 365 subscription.

It contains 1 security update for shared Office components. After applying this update, you can no longer insert FBX files (3D models) into Office documents and emails. Substitutes and workarounds are available.

There were no additional non-security fixes released to any of the already available Channels. There is also no new Monthly Enterprise Channel release and note that support for Version 2309 has ended.

However, Version 2308 has now also been released to the Semi-Annual Enterprise Channel and contains 12 highlighted new features and 49 fixes for Outlook (including 4 via Word and 1 via shared Office components) which have been made available already to the other release channels. The new feature are;

• Inheritance of attachment labels to email messages
  For email messages with attachments, apply a label that matches the highest classification of those attachments.
• Prevent data leaks more easily with the new Sensitivity toolbar
  Sensitivity labels powered by Microsoft Purview Information Protection are now displayed next to the message Subject line, allowing you to easily recognize and adhere to your organization’s policies.
• Block emails with sensitive labels
  Implement pop-up messages in Outlook that warn, justify, or block emails being sent based on sensitivity labels.
• Disable the Azure Information Protection Add-in by default
  Office apps will now automatically disable the legacy Azure Information Protection add-in and use the built-in sensitivity labels to view and apply labels powered by Microsoft Purview Information Protection.
• Assign a sublabel as the default when a parent label is selected
  When using built-in sensitivity labels in Microsoft 365 Apps, admins can specify a sublabel to get applied automatically when a parent label is selected. This takes effect only when users select a parent label manually.
• Same signature, all devices with Outlook for Windows
  Your signature is stored in the cloud. Create it once and use it everywhere you use Outlook for Windows.
• Enabling Bookings Meta OS app in Win32
  Replacing the existing Bookings app with new app for Meta OS in Win32.
• Accessibility Ribbon in Outlook for Windows
  The Accessibility Ribbon brings together in one place all the tools you need to make your emails accessible.
• Get relevant alerts with new Notifications pane
  Don’t let important information get buried in your inbox. The new Notifications pane in Outlook delivers notifications that are relevant to you in the context of your regular email. The pane gives you the ability to customize the types of notifications you wish to receive, including email and document @mentions, travel updates, deliveries, and more.
• Reactions
  This feature allows users to apply emotive reactions (e.g., , ♥, ) to email messages and see what reactions have been applied by other people as well.
• We added a registry key that hides the “Try the new Outlook” toggle
  To learn more about the new Outlook for Windows, please click here. For additional information on managing mailbox access to the new Outlook for Windows, please click here.
  • Key: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Options\General
  • Value name: HideNewOutlookToggle
  • Value type: REG_DWORD
  • 0 (default) – “Try the new Outlook” toggle, if available in selected update channel, is displayed to users.
    1 – “Try the new Outlook” toggle is hidden.
• Org Explorer
  Visualize and explore your company’s internal structure, work teams, and individual roles.

Based on your release channel, you’ll be updated to the following version;

• Microsoft 365 Apps, Outlook 2016 Retail, Outlook 2019 Retail, Outlook 2021 Retail
  Version 2312 (Build 17126.20132)
• Monthly Enterprise
  Version 2310 (Build 16924.20202) 
• Semi-Annual Enterprise (Preview)
  Version 2308 (Build 16731.20504)
• Semi-Annual Enterprise
  Version 2308 (Build 16731.20504)
  Version 2302 (Build 16130.20884)
  Version 2208 (Build 15601.20848) 
• Outlook LTSC 2021
  Version 2108 (Build 14332.20624)
• Outlook 2019 Volume Licensed
  Version 1808 (Build 10406.20006)

Note: Depending on your installation type, this update can be installed via the Update Now button in Outlook itself or the Microsoft Store. This update does not apply to msi-based installations of Office 2016.

A bit delayed because of the Christmas and New Year holidays, but Microsoft has now released the December 2023 feature update of Outlook for Microsoft 365 Apps in the Current Channel.

This time there is 1 new feature and 6 documented fixes for Outlook.

• Office has a new default theme
  We’ve updated the default font and colors of the Office theme to be more modern and accessible.
• We fixed an issue where the message list was blank when switching between the “Focused” and “Other” views.
• We fixed an issue where Skype for Business was shutting down unexpectedly at start up.
• We fixed an issue where the list of invalid recipients was showing duplicates.
• We fixed an issue where Mail Tips were not showing for attachments.
• We fixed an issue that caused Outlook to exit unexpectedly when opening embedded mail attachments in another application.
• We fixed an issue that caused the tracking status summary to be missing from the organizer’s meeting form.

Note: Depending on your installation type, this update can be installed via the Update Now button in Outlook or the Microsoft Store and updates Outlook to: Version 2312 (Build 17126.20126).

The December security and rollup update has been made available for all Click-to-Run installations of Outlook 2016, Outlook 2019, Outlook 2021 and Outlook as part of a Microsoft 365 subscription.

It contains 2 security updates for Outlook (1) and Word (1). The details about the Outlook vulnerability can be found below;

• CVE-2023-35636: Microsoft Outlook Information Disclosure Vulnerability
  • This vulnerability is currently not publicly disclosed nor exploited.
  • Exploitation of the vulnerability requires that a user open a specially crafted file.
  • The Preview Pane is not an attack vector.
  • The Exploitability Assessment is rated: Exploitation Less Likely.

In addition, it contains 1 non-security fix related to Outlook Current Channel Version 2311, 1 new feature and 13 fixes related to Outlook Monthly Enterprise Version 2310, 5 fixes related to Outlook Semi-Annual (Preview) Version 2308, and 1 fix related to Outlook Semi-Annual Version 2302. Most notable fixes are;

• Version 2311
• We fixed an issue where the message list was blank when switching between the “Focused” and “Other”. views.
• Version 2310
• Teams Meeting Apps now work in Outlook too
  Now, you can configure a meeting app while scheduling an invite in Outlook. This meeting app will be ready to use when you chat or join the meeting on Teams.
• We fixed an issue that caused a meeting update to be sent to all attendees when clicking on “cancel” in the “Send Update to Attendees” dialog.
• We fixed an issue that caused Outlook to fail to comply with the default browser settings for some users.
• We fixed an issue where Microsoft account users were missing their Outlook Add-ins.
• We fixed an issue where new lines were added to an Outlook signature when pressing Enter in the body of the email.
• Version 2308
• We fixed an issue that caused delegates to be unable to view their manager’s private calendar items even when granted permission.
• We fixed an issue where setting Breaks to Continuous changed to Page after a Mail Merge.
• Version 2302
• We fixed an issue that caused SafeLinks to fail to launch properly when the target document was in a nested folder.

Based on your release channel, you’ll be updated to the following version;

• Microsoft 365 Apps, Outlook 2016 Retail, Outlook 2019 Retail, Outlook 2021 Retail
  Version 2311 (Build 17029.20108)
• Monthly Enterprise
  Version 2310 (Build 16924.20180)
  Version 2309 (Build 16827.20324)
• Semi-Annual Enterprise (Preview)
  Version 2308 (Build 16731.20460)
• Semi-Annual Enterprise
  Version 2302 (Build 16130.20868)
  Version 2208 (Build 15601.20832) 
• Outlook LTSC 2021
  Version 2108 (Build 14332.20615)
• Outlook 2019 Volume Licensed
  Version 1808 (Build 10405.20015)

Note: Depending on your installation type, this update can be installed via the Update Now button in Outlook itself or the Microsoft Store. This update does not apply to msi-based installations of Office 2016.

A Security Update has been released for Outlook 2016. It resolves the following vulnerability;

• CVE-2023-35636: Microsoft Outlook Information Disclosure Vulnerability
  • This vulnerability is currently not publicly disclosed nor exploited.
  • Exploitation of the vulnerability requires that a user open a specially crafted file.
  • The Preview Pane is not an attack vector.
  • The Exploitability Assessment is rated: Exploitation Less Likely.

View: Download information for KB5002529

Note: This update can be installed via Microsoft Update and updates Outlook to version 16.0.4978.1000. This update does not apply to Perpetual (Retail) and Microsoft 365 based installations of Office 2016.

Microsoft has released the November 2023 feature update of Outlook for Microsoft 365 Apps in the Current Channel.

This time there are 5 documented fixes for Outlook and 2 related to Outlook.

• We fixed an issue where Outlook would close unexpectedly when a user clicked “Cancel” in the Wait on Send dialog if the message had attachments.
• We fixed an issue where Mail Tips were not showing for attachments.
• We fixed an issue where the list of invalid recipients was showing duplicates.
• We fixed an issue that caused Outlook to exit unexpectedly when opening embedded mail attachments in another application.
• We fixed an issue where the scrollbar didn’t render in the Contact Card View.
• We fixed an issue where attendees were not added automatically from the Meeting Details when using the Email Page functionality. (OneNote)
• We fixed an issue where setting Breaks to Continuous changed to Page after a Mail Merge. (Word)

Note: Depending on your installation type, this update can be installed via the Update Now button in Outlook or the Microsoft Store and updates Outlook to: Version 2311 (Build 17029.20068).