Security News Microsoft patches Exchange Server zero-day exploited in attacks BleepingComputer Daniel Bender 10 Jun 2026 Share Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web Access users.