Microsoft warns of Exchange zero-day flaw exploited in attacks

Microsoft has warned of a high-severity Exchange Server vulnerability that is being exploited in attacks, allowing threat actors to execute arbitrary code via cross-site scripting. The vulnerability targets Outlook on the web users. Microsoft has shared mitigations for the flaw.