Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server

  • Thread starter Thread starter MSRC
  • Start date Start date
M

MSRC

November 8, 2022 update - Microsoft released security updates for CVE-2022-41040 and CVE-2022-41082. We recommend that customers protect their organizations by applying the updates immediately to affected systems. The options described in the Mitigations section are no longer recommended. For more information, review the Exchange Team blog. Summary On November 8 Microsoft released security updates for two zero-day vulnerabilities affecting Microsoft Exchange Server 2013, Exchange Server 2016, and Exchange Server 2019.

Continue reading...
 
Back
Top