When the victim connects to the attacker’s SMB server, the connection to the remote server sends the user’s New Technology LAN Manager ( NTLM) negotiation message automatically, which the attacker can use for authentication against other systems that support NTLM authentication. msg - the message format that supports reminders in Outlook - to trigger the vulnerable API endpoint PlayReminderSound using “PidLidReminderFileParameter” (the custom alert sound option for reminders). The attacker remotely sends a malicious calendar invite represented by.

Share-hosted on a server controlled by the attacker, the vulnerability is exploited whether the recipient has seen the message or not.

Our recommendation: Install Windows 10 and update to Outlook 2019.The attacker sends a message to the victim with an extended Message Application Program Interface (MAPI) property with a Universal Naming Convention (UNC) path to a remote attacker-controlled Server Message Block (SMB, via TCP 445). Support for Windows 7 ended on January 14, 2020. Our recommendation Install Windows 10 and update to Outlook 2019 Our recommendation: Install Windows 10 and update to Outlook 2019 Outlook 2010 is not compatible with Microsoft Exchange 2019. The support for Windows 7 ended on January 14, 2020. Outlook 2021 requires at least Windows 10 Outlook 2019 requires at least Windows 10 Our recommendation: Update to Outlook 2016 Our recommendation: Update to Outlook 2019

Outlook 2013 is not compatible with Windows 11.

In this article, we'll show you which Windows and Microsoft Outlook versions are most compatible with each other and which combinations you can use with Microsoft Exchange 2019.

Outlook 2019 version