Description of the security update for Outlook 2016: August 14, 2018

This security update resolves vulnerabilities in Microsoft Office. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures ADV180021.

Note To apply this security update, you must have the release version of Outlook 2016 installed on the computer.

Be aware that the update that is available the Microsoft Download Center applies to the Microsoft Installer (.msi)-based edition of Office 2016. It doesn't apply to the Office 2016 Click-to-Run editions, such as Microsoft Office 365 Home (see Determining your Office version).

This security update contains improvements and fixes for the following nonsecurity issues:

• With this update installed, Microsoft Outlook 2016 restricts users from adding cloud files as attachments to digitally signed, rights-protected, or encrypted email messages. If you try to send such email messages, the email messages can't be sent, and a dialog box notifies you why it can't be sent. In this case, you would have to remove the attachments or attach the cloud files as a copy.
• Add translations in all languages for Outlook 2016 update that restrict the user from adding cloudy attachments to digitally signed, rights protected, or encrypted messages. (This is related to that issue that is described in the previous bullet.)
   
• This update improves translations of first, middle and last names labels in French to make sure that the meaning is accurate.

• This update fixes a potential crash in third-party MAPI applications.

• Outlook 2016 may still start in Offline mode even though you set it to start in Online mode.

• Assume that you sign in to Outlook 2016 by using an account that doesn't use the modern authentication in Windows 10. The Security Support Provider Interface (SSPI) authentication prompt will sometimes appear behind other windows, and it is inaccessible by keyboard. See KB 4032226 for more information.

  • Add translations in all languages for the client fix that addresses an issue where the authentication prompt would sometimes appear behind other windows and may be inaccessible to the user. (This is related to the issue that is described in the previous bullet.)

• Dynamics CRM functionality is blocked unless you enable all roaming folder homepages by using the EnableRoamingFolderHomepages registry key that is documented in the following article:

  Microsoft Dynamics 365 for Outlook is unable to render webpages after installing the October 2017 Microsoft Outlook security update