Microsoft warned Exchange Server customers about critical OWA vulnerability CVE-2026-42897 affecting on-premises deployments.

Microsoft this week announced it will be bringing its Extended Security Update (ESU) program for on-premises Exchange Server 2016 and 2019, offering organizations critical protection as they approach ...

On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow ...

Organizations running Exchange Server 2019 won't be getting an H2 cumulative update (CU) this year, a Microsoft announcement this month explained. Microsoft is planning to defer the release of the ...

The mainstream support for Microsoft Exchange Server 2019 officially ends as of today, January 9. However, it will continue to get updates via Extended support until October 14, 2025. The ...

While there weren’t any genuine zero-day vulnerabilities to patch in May’s Patch Tuesday update, the fallout since then has ...

The zero-day vulnerability affects on-premises installations for all versions of Exchange Server 2016, 2019 and Subscription ...

Microsoft is working to patch CVE-2026-42897, an Exchange Server zero-day vulnerability that has been exploited in attacks.

Microsoft confirmed on May 14 that CVE-2026-42897 — a cross-site scripting flaw in the Outlook Web Access component of Exchange Server 2016, 2019, and Subscription Edition — is under active ...

Enterprises must soon have subscription licenses for all on prem users and servers. The shift comes with a significant price increase. If you’re an enterprise still hosting on-premises Exchange 2016 ...

Microsoft on Thursday disclosed a zero-day vulnerability in Exchange that's under active exploitation, but four days later customers are still awaiting a patch. The zero-day, tracked as CVE-2026-42897 ...

Microsoft has reminded admins that Exchange 2016 and Exchange 2019 will reach the end of extended support in October and shared guidance for those who need to decommission outdated servers. Exchange ...