tldrdailynews.com logo

Multiple Zero-Day Flaws and Vulnerabilities Uncovered in Microsoft Exchange and SketchUp Support

1 min read
Source: Security Affairs
Multiple Zero-Day Flaws and Vulnerabilities Uncovered in Microsoft Exchange and SketchUp Support
Photo: Security Affairs
TL;DR

The Zero Day Initiative (ZDI) has disclosed four zero-day vulnerabilities in Microsoft Exchange that can be exploited remotely by authenticated attackers to execute arbitrary code or disclose sensitive information. Despite being notified by ZDI, Microsoft has not yet fixed the vulnerabilities. The flaws include deserialization issues and server-side request forgery vulnerabilities.

Topics:technologycybersecurity#cybersecurity#information-disclosure#microsoft-exchange#remote-code-execution#responsible-disclosure#zero-day-vulnerabilities
Share this article
  1. ZDI discloses four zero-day flaws in Microsoft Exchange  Security Affairs
  2. New Microsoft Exchange zero-days allow RCE, data theft attacks  BleepingComputer
  3. Microsoft Temporarily Disables SketchUp Support After Discovery of 117 Vulnerabilities  SecurityWeek
  4. Zscaler finds 117 Microsoft 365 bugs via SketchUp 3D file type  TechTarget

Want the full story? Read the original reporting

Read on Security Affairs