Microsoft Issues Alert Over Active Email Server Vulnerability

Microsoft has disclosed an active security vulnerability stemming from a flaw in web page processing that could enable attackers to inject malicious code into user sessions through the Outlook Web Access interface. This exploitation could potentially grant threat actors the ability to seize control of user sessions or run arbitrary commands within affected systems.

The vulnerability impacts Exchange Server 2016, Exchange Server 2019, and Exchange Server Subscription Edition. The company has confirmed that its cloud-based Exchange Online service remains unaffected by this flaw.

The U.S. Cybersecurity and Infrastructure Agency has formally recognized this vulnerability as an actively exploited threat, confirming that legitimate cyber attacks are currently targeting susceptible installations.

Security researchers have documented that attackers can weaponize this vulnerability by crafting malicious email messages. When recipients open these messages through the web interface, embedded malicious code executes automatically, potentially opening pathways for deeper network penetration within organizational infrastructure.

Microsoft has urged all organizations to immediately enable the "Exchange for Emergency and Security Mitigation" service and deploy the "Exchange Safety Check" tool to ensure protective measures are functioning properly. The company has warned that deactivating these security features could expose systems to direct compromise.

Security professionals have recommended that organizations consider transitioning to cloud-based solutions like Exchange Online or implementing additional security layers around on-premises servers using "zero trust" architecture principles to minimize exposure to cyberattacks.

Cybersecurity analysts classify this vulnerability among the most severe current "zero-day" threats targeting corporate email infrastructure, with documented evidence of active exploitation in ongoing cyber operations.