The Update BureauKB5036401: Security update for Exchange Server 2019 CU14, March 2024. Attachment scanning loses support for some file types
Text extraction stops for JPEG, TIFF, and AutoCAD attachments, which can affect some mail rules. EWS search results are also corrected.
Does it affect you? Applies to: Exchange Server 2019 CU14 (x64), build 15.2.1544.9. This update is available only to organizations in the Extended Security Update program.
Review notes Additional details from the official release notes (5) Read notes
- Known issues The change affects attachment scanning in Exchange Transport Rules and Data Loss Prevention rules. After the update, JPEG, TIFF, and AutoCAD content can no longer be extracted and inspected in those scenarios.
- Known issues KB5037224 fixes the Download Domains issue.
- Known issues KB5037224 fixes the OwaDeepTestProbe and EacBackEndLogonProbe failures.
- Known issues KB5037224 fixes the Outlook cached-mode search issue.
- Known issues KB5037224 fixes the issue previewing Word documents in Outlook on the web.
The official sources are linked at the end of the page.
For servers running Cumulative Update 14: each cumulative update gets its own update. Support for this version ended on October 14, 2025: Microsoft releases this update only to organizations enrolled in the Extended Security Update (ESU) program, not through Microsoft Update. The others should move to Exchange Server Subscription Edition. Which version am I on?
What changes
Fix 1 change
EWS search
- EWS search requests no longer display inaccurate results.1
Known issues
-
After you install this security update (SU), the program no longer supports the Oracle Outside In Technology (OIT) or OutsideInModule.
Exchange no longer extracts text from JPEG, TIFF, or AutoCAD attachments. This affects mail rules that inspect attachment content.2
How to apply the workaround PowerShellAdministrators can use Microsoft's PowerShell script to reactivate blocked file-type processing. Microsoft advises against overriding the default unless a functional issue affects mail flow.2
-
After you install this SU, Download Domains are no longer working as expected.
Download Domains do not work as expected. OWA users can no longer see inline images or download attachments.3
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
-
After you install this SU, OwaDeepTestProbe and EacBackEndLogonProbe are no longer working.
Some Exchange health checks stop working after installation.4
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
-
After you install this SU, you receive a "We're having trouble fetching results from the server" error message when you run a search in Microsoft Outlook cached mode.
Outlook cached-mode searches show a server-results error, and some items might be missing. Searches work in online mode and OWA.5
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
-
After you install this SU, you can't preview Microsoft Word documents in Outlook on the web (OWA), and you receive an error message.
Word documents cannot be previewed in Outlook on the web, and an error appears.6
Workaround status No workaround yetMicrosoft has not published a manual workaround for this issue yet. Monitor release health until a resolving update is available.
Technical details
Data sheet · Security · Downloads · Components Click to collapse or expand
Data sheet
- Released
- 2024-03-12
- Classification
- Security Updates
- Type
- Cumulative update
- Servicing branch
- CU14
- Replaces
- KB5035606
- Replaced by
- KB5037224
| Version | Build | Channel |
|---|---|---|
| 2019 | 15.2.1544.9 | General availability |
Security
| Vulnerability | Severity | CVSS |
|---|---|---|
|
Microsoft Exchange Server Remote Code Execution Vulnerability
|
Not rated | — |
Sources
- Microsoft Support: KB5036401
- Microsoft Support
- Microsoft Support
- Microsoft Support
- Microsoft Support
- Microsoft Support
Cited passages from Microsoft's official notes (6)
-
1.
EWS search request displays inaccurate results
support.microsoft.com -
2.
The content of Jpeg, Tiff, and AutoCAD files can no longer be extracted and inspected after the March 2024 security update is installed.
support.microsoft.com -
3.
Users who are using Outlook on the Web (OWA) to access their email can no longer see inline images. Additionally, no attachments can be downloaded by using the OWA client.
support.microsoft.com -
4.
After the Microsoft Exchange Server March 2024 security update is installed, the OwaDeepTestProbe and EacBackEndLogonProbe probes begin to fail.
support.microsoft.com -
5.
The search works as expected if you run it in Outlook online mode or in Outlook on the web (OWA).
support.microsoft.com -
6.
After you install the March 2024 security update for Microsoft Exchange Server 2019 and 2016, you can't preview Microsoft Word documents in Outlook on the web (OWA), and you receive the following error message:
support.microsoft.com
Checked automatically: 7 of 8 checks passed, 6 quoted passages · compared with Microsoft's page on Oct 20, 2026
- Quotes found in the official pages: passed
- Numbers found in the sources: passed
- Vulnerabilities from the dossier only: passed
- Links to allowed domains only: passed
- Every official change covered: passed
- Readable plain text: passed
- Changes confirmed by the file list: passed
- Sources agree: not passed
A second AI read the text against the sources: correctness 3/5, clarity 3/5, completeness 3/5. How we work
Published by The Update Bureau. Written with AI from Microsoft's own documents, checked by rules and a second AI. How we work · Report a mistake