Description of the security update for Microsoft Exchange Server 2019 and 2016: November 14, 2023 (KB5032146)

None Notice For Microsoft Exchange Server 2016 installations, see also KB 5032147 for additional information about issues that are fixed in this security update. This security update rollup resolves vulnerabilities in Microsoft Exchange Server. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures (CVE): CVE-2023-36439 – Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-36050 – Microsoft Exchange Server Spoofing Vulnerability CVE-2023-36039 – Microsoft Exchange Server Spoofing Vulnerability CVE-2023-36035 – Microsoft Exchange Server Spoofing Vulnerability Issues that are fixed in this update Serialization payload signing fails to run RBAC cmdlets Mailbox migration fails with communication error permanent exception Features that are added in this update Certificate-based signing of PowerShell serialization payloads enabled in November 2023 Exchange SU Known issues in this update In some environments, the queue viewer might stop responding and return the following error message after you install this security update: "Failed to enable constraints. One or more rows contain values violating non-null, unique, or foreign-key constraints". This error can occur if the authentication certificate for the Exchange server is expired. To resolve the error, renew the certificate, either manually or by running this script. Exchange Server Health Checker To verify that that the installation is successful, and…Read More