Exchange Server October 2022 Security Updates released

Andres Bohren

2022-10-12

Hi All,

A few hours ago the Exchange Team released Security Updates for Exchange 2016 and 2019.

NOTE: The October 2022 SUs do not contain fixes for the zero-day vulnerabilities reported publicly on September 29, 2022 (CVE-2022-41040 and CVE-2022-41082).

Released: October 2022 Exchange Server Security Updates

https://techcommunity.microsoft.com/t5/exchange-team-blog/released-october-2022-exchange-server-security-updates/ba-p/3646263

Description of the security update for Microsoft Exchange Server 2019 and 2016: October 11, 2022 (KB5019077)

https://support.microsoft.com/en-us/topic/description-of-the-security-update-for-microsoft-exchange-server-2019-and-2016-october-11-2022-kb5019077-b5ae8793-5e5c-4faa-972d-9228945973e5

Security Update For Exchange Server 2016 CU23 (KB5019077)

https://www.microsoft.com/en-us/download/details.aspx?id=104671

Make sure you have the latest CU and Service Pack installed. As noted on top of the Article, you have to apply the Mitigations for September 2022 after the Install. Or check that the Exchange Server Emergency Mitigation Service applied the Mitigation correctly after the Installation.