Exchange Cves News Today : Breaking News, Live Updates & Top Stories | Vimarsana

By Justin Katz Apr 14, 2021 The National Security Agency has helped identify two new vulnerabilities in on-premise Exchange servers, and Microsoft has released patches. “We have not seen the vulnerabilities used in attacks against our customers,” according to a company blog post. “However, given recent adversary focus on Exchange, we recommend customers install the updates as soon as possible to ensure they remain protected from these and other threats.” The two flaws -- CVE-2021-28480 and CVE-2021-28481 -- are both remote code execution vulnerabilities. They were reported by a s...

The new vulnerabilities found in Exchange servers running on-premises are separate from zero-day exploits discovered and announced in March.

By Justin Katz   Microsoft on Tuesday released patches for two newly discovered vulnerabilities in on-premise Exchange servers, separate from zero-day exploits found in March, and the company is crediting the National Security Agency with identifying the flaws. “These new vulnerabilities were reported by a security partner through standard coordinated vulnerability disclosure and found internally by Microsoft,” according to a company blog post. “We have not seen the vulnerabilities used in attacks against our customers. However, given recent adversary focus on Exchange, we recommend cu...