Images are blocked and meeting body is read only in Outlook Desktop if calendar items are from other senders for Microsoft Outlook Spoofing Vulnerability released August 8, 2023

Last Updated: September 14, 2023

ISSUE

When you receive meeting items sent from any other sender (internal or external), the security update makes two changes:

1. The meeting is now read only for the recipient. It is no longer possible to make changes to the body of the meeting or to attach files to the meeting.

2. Images in the meeting item that are stored on network paths such as UNC shares (\\server), file share paths (File://server), or external URL paths (https://) are blocked.

This issue happens after installing the Outlook Desktop August 8th, 2023, security updates. For additional information see the respective CVE below:

• CVE-2023-36893

• Release notes for Microsoft Office security updates

STATUS: RESOLUTION

If the image path is legitimate, you can still download the image to view it.

1. Right-click the image.

2. Select Download Pictures or Save as Picture as appropriate.
   

The meeting body is read only. If you need to keep notes on the meeting, consider these alternate solutions: 

• Take meeting notes in Microsoft Teams

• Take OneNote notes in a meeting

• Create or schedule an appointment

Normally adding the external sender to Safe Senders would enable the pictures to download automatically and the calendar item would be editable. For external received calendar items this will no longer apply and the resolution steps above are required.

Additional Resources

Add recipients of my email messages to the Safe Senders List

Block or unblock automatic picture downloads in email messages