New Microsoft Exchange Zero-Day Vulnerabilities Could Lead to RCE, SSRF (ZDI-23-1578, ZDI-23-1579, ZDI-23-1580, ZDI-23-1581)

The discovery of four new zero-day vulnerabilities in Microsoft Exchange is raising concerns in the cybersecurity community. The vulnerabilities are high-severity, and pertain to Server-Side Request Forgery (SSRF) and Remote Code Execution (RCE) issues.

New Microsoft Exchange Zero-Day Vulnerabilities Could Lead to RCE, SSRF

What Are the Vulnerabilities Affecting Microsoft Exchange?

All four of the zero-day vulnerabilities were uncovered by Piotr Bazydlo of the Trend Micro Zero Day Initiative (ZDI), which has opted for public disclosure in line with its …

code code execution community cybersecurity cybersecurity community discovery exchange forgery high microsoft microsoft exchange microsoft exchange zero-day rce remote code remote code execution request server server-side request forgery severity ssrf vulnerabilities zdi zero-day zero-day vulnerabilities