Lucene search

K
mskbMicrosoftKB5003612
HistoryJul 13, 2021 - 7:00 a.m.

Cumulative Update 10 for Exchange Server 2019 (KB5003612)

2021-07-1307:00:00
Microsoft
support.microsoft.com
31

8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

5.2 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

14.6%

Cumulative Update 10 for Exchange Server 2019 (KB5003612)

**Important:**This regularly scheduled cumulative update contains all the security fixes of the security updates in June and other previous security updates…

Cumulative Update 10 for Microsoft Exchange Server 2019 was released on June 29, 2021. It includes fixes for nonsecurity issues and all previously released fixes for security and nonsecurity issues. These fixes will also be included in later cumulative updates for Exchange Server 2019.

This update also includes new daylight saving time (DST) updates for Exchange Server 2019. For more information about DST, see Daylight Saving Time Help and Support Center.

New feature in this cumulative update

Microsoft Exchange Server 2019 now supports integration with Windows Antimalware Scan Interface (AMSI). This feature enables an AMSI-capable antivirus or antimalware solution to scan content in HTTP requests that’re sent to the Exchange Server. Additionally, it will block a malicious request before it’s handled by Exchange. For more details, see More about AMSI integration with Exchange Server.

Known issues in this cumulative update

  • In multidomain Active Directory forests in which Exchange is installed or was prepared previously by using the /PrepareDomain option in Setup, this action must be completed after the**/PrepareADcommand for this cumulative update has been completed and the changes are replicated to all domains. Setup will try to run the/PrepareAD** command during the first server installation. Installation will finish only if the user who initiated Setup has the appropriate permissions.
    • About the /PrepareDomain operation in multidomain:

The /PrepareDomain operation automatically runs in the Active Directory domain in which the**/PrepareAD command is run. However, it may be unable to update other domains in the forest. Therefore, a domain administrator should run the/PrepareDomain** in other domains in the forest.
* About the permission question:

Because /PrepareAD is triggered in Setup, if the user who initiates Setup isn’t a member of Schema Admins and Enterprise Admins, the readiness check will fail and you receive the following error messages.Error 1:

The Active Directory schema isn’t up-to-date, and this user account isn’t a member of the ‘Schema Admins’ and/or ‘Enterprise Admins’ groups. For more informaion, visit: <http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setipreadiness.SchemaUpdateRequired.aspx&gt;.

Error 2:

Global updates need to be made to Active Directory, and this user account isn’t a member of the 'Enterprise Admins’group. For more information, visit: <http://technet.microsoft.com/library(EXCHG.150)/ms.exch.setupreadiness.GlobalUpdateRequred.aspx&gt;.

  • Autodiscover Event ID 1 occurs after you install Cumulative Update 3 for Exchange Server 2019. For more information, see KB 4532190.
  • “500 Unexpected Error” when trying to create a user mailbox in ECP. For more information, see KB 5001874.
  • “Cannot Send Mail - Your mailbox is full” error when you use iPhone mail to send very large attachments. For more information, see KB 5004622.

Issues that this cumulative update fixes

This cumulative update also fixes the issues that are described in the following Microsoft Knowledge Base articles:

  • 5004612 Message body not displayed in OWA if the message was added in Outlook to a new mailbox
  • 5004613 OutOfMemory exception when moving a public folder that has a large ICS sync state
  • 5004614 Korean text is garbled in calendar invitation to a user with a Chinese display name
  • 5004615 “InvalidOperationException” and Store Worker process crashes during mailbox move
  • 5004616 Changing the email address in EAC doesn’t work in modern browsers
  • 5004617 TLS 1.2 is not set as default after you install Exchange 2019 with Edge Transport role
  • 5004618 MSExchangeMailboxAssistants 4999 Crash in ELCAssistant.InvokeInternalAssistant with System.NullReferenceException
  • 5004619 Mailbox creation through ECP fails after installing Exchange Server 2019 or 2016 April update

Get Cumulative Update 10 for Exchange Server 2019

Volume Licensing Center

To get Cumulative Update 10 for Exchange Server 2019, go to Microsoft Volume Licensing Center.Note The Cumulative Update 10 package can be used to run a new installation of Exchange Server 2019 or to upgrade an existing Exchange Server 2019 installation to Cumulative Update 10.

Cumulative update information

Prerequisites

This cumulative update requires Microsoft .NET Framework 4.8.A component that’s used within Exchange Server requires a new Visual C++ component to be installed together with Exchange Server. This prerequisite can be downloaded at Visual C++ Redistributable Package for Visual Studio 2012.For more information about the prerequisites to set up Exchange Server 2019, see Exchange 2019 prerequisites.

Restart requirement

You might have to restart the computer after you apply this cumulative update package.

Registry information

You don’t have to make any changes to the registry after you apply this cumulative update package.

Removal information

After you install this cumulative update package, you can’t uninstall the package to revert to an earlier version of Exchange Server 2019. If you uninstall this cumulative update package, Exchange Server 2019 is removed from the server.

File information

File hash information

File name SHA256 hash
ExchangeServer2019-x64-cu10.iso A5ABE84FDF53750D631CB4064CAE5E84C293EAD8B94367826925B90BEE6C1EAF

More information

For more information about the deployment of Exchange Server 2019, see Release notes for Exchange Server 2019.

For more information about the coexistence of Exchange Server 2019 and earlier versions of Exchange Server in the same environment, see Exchange Server 2019 system requirements.

For more information about other Exchange updates, see Exchange Server Updates: Build numbers and release dates.

References

Learn about the terminology that Microsoft uses to describe software updates.

Change history

The following table summarizes some of the most important changes to this topic.Date Description
August 30, 2021 Added a “New feature in this cumulative update” section.

8 High

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.1 High

AI Score

Confidence

High

5.2 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:L/Au:S/C:P/I:P/A:P

0.0005 Low

EPSS

Percentile

14.6%