Sign in with Microsoft
Sign in or create an account.
Select a different account.
You have multiple accounts
Choose the account you want to sign in with.


This security update resolves a vulnerability in Microsoft Exchange Outlook Web Access (OWA). The vulnerability could allow remote code execution in Microsoft Exchange Server if an attacker sends an email that has a specially crafted attachment to a vulnerable Exchange server.

To learn more about the vulnerability, see Microsoft Security Bulletin MS17-015.

How to get and install the update

This update is available from Microsoft Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to get security updates automatically, see Windows Update: FAQ.

You can get the stand-alone update package through the Microsoft Download Center.

Click the download link in Microsoft Security Bulletin MS17-015 that corresponds to the version of Exchange Server that you are running.

More Information

Security update deployment information

For deployment information about this update, see Microsoft Knowledge Base article 4013242

Package Name

Package Hash SHA 1

Package Hash SHA 2










For a list of the file attributes that are provided in this update, download the file information for update 4012178.

Need more help?

Want more options?

Explore subscription benefits, browse training courses, learn how to secure your device, and more.

Communities help you ask and answer questions, give feedback, and hear from experts with rich knowledge.

Was this information helpful?

What affected your experience?
By pressing submit, your feedback will be used to improve Microsoft products and services. Your IT admin will be able to collect this data. Privacy Statement.

Thank you for your feedback!