Full Report
Microsoft has confirmed several issues affecting Microsoft 365 customers using the "paste special' option and the calendar feature in the classic Outlook email client. [...]
Analysis Summary
# Vulnerability: Microsoft Outlook Functionality Issues Resolved (Paste Shortcut and Calendar Rendering)
## CVE Details
- CVE ID: N/A (This article describes feature/bug fixes, not explicitly assigned CVEs for security flaws.)
- CVSS Score: N/A
- CWE: N/A
## Affected Systems
- Products: Microsoft Outlook (Classic Version referenced)
- Versions: Unspecified, affecting users prior to the announced rollout phases.
- Configurations: Users utilizing the standard Paste shortcut (shared logic from Word) or users with multiple calendars enabled in Calendar View.
## Vulnerability Description
The article details fixes for two distinct issues impacting Microsoft Outlook functionality:
1. **Paste Shortcut Issue:** The behavior of the Paste shortcut key combination in Outlook was altered, likely due to shared logic updates from Microsoft Word that didn't propagate correctly or were undesirable in Outlook. Users reported that expected paste functionality was broken or altered.
2. **Blank Calendar Rendering Issue:** A known issue caused parts of the Outlook Calendar View to render as blank sections for users who had multiple calendars enabled.
## Exploitation
- Status: Informational/Functional Bugs, not explicitly detailed as security vulnerabilities with active exploitation.
- Complexity: N/A
- Attack Vector: N/A (These represent functional/usability bugs.)
## Impact
- Confidentiality: Low (Primarily functional disruption)
- Integrity: Low (Primarily functional disruption)
- Availability: Low (Product functionality degraded)
## Remediation
### Patches
The rollout schedule for the fix addressing the paste shortcut issue is as follows:
* **Beta Channel:** Early May
* **Current Channel Preview:** Early June
* **Current Channel (General Availability):** Around late June (Version 2506 Build 18925.20000 or later).
The fix for the **Blank Calendar Rendering Issue** has already been deployed via a service change, requiring affected users to restart classic Outlook.
### Workarounds
For the Paste Shortcut Issue:
1. **Paste Special Dialog:** Use the `Alt+HVS` shortcut to open the 'Paste Special' dialog.
2. **Ribbon Option:** Use the 'Paste Special' option on the Ribbon.
3. **For immediate access to the fix:** Switch to the Beta Channel by adding a registry key:
reg add HKLM\Software\Policies\Microsoft\office\16.0\common\officeupdate /v updatebranch /t REG_SZ /d BetaChannel
Followed by updating Outlook via File > Office Account > Update Options > Update Now.
## Detection
- Detection methods are focused on observing the presence of the described functional failures (incorrect paste behavior or blank calendar sections).
- Logs related to the update process will confirm patch deployment.
## References
- Vendor Advisory (Paste Shortcut Context): techcommunity dot microsoft dot com/blog/microsoft365insiderblog/paste-text-only-shortcut-in-word/4218362
- Vendor Advisory (Paste Special Help): support dot microsoft dot com/en-us/office/paste-special-e03db6c7-8295-4529-957d-16ac8a778719
- Source Article: bleepingcomputer dot com/news/microsoft/microsoft-fixes-outlook-paste-blank-calendar-rendering-issues/