Security News Microsoft warns of Exchange zero-day flaw exploited in attacks BleepingComputer Daniel Bender 15 May 2026 Share On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow threat actors to execute arbitrary code via cross-site scripting (XSS) while targeting Outlook on the web users.