NSA helps out Microsoft with critical Exchange Server vulnerability disclosures in an April shower of patches

NSA helps out Microsoft with critical Exchange Server vulnerability disclosures in an April shower of patches

Patch Tuesday April showers bring hours of patches as Microsoft delivers its Patch Tuesday fun-fest consisting of over a hundred CVEs, including four Exchange Server vulnerabilities reported to the company by the US National Security Agency (NSA).


Forty-four different products and services are affected, mainly having to do with Azure, Exchange Server, Office, Visual Studio Code, and Windows. Among the vulnerabilities, four have been publicly disclosed and a fifth is being actively exploited. Nineteen of the CVEs have been designated critical.

"This month’s release includes a number of critical vulnerabilities that we recommend you prioritize, including updates to protect against new vulnerabilities in on-premise Exchange Servers," Microsoft said in its blog post.


"These new vulnerabilities were reported by a security partner through standard coordinated vulnerability disclosure and found internally by ..

Support the originator by clicking the read the rest link below.