Microsoft Confirms Pair of Blindsiding Exchange Zero-Days, No Patch Yet

The “ProxyNotShell” security vulnerabilities can be chained for remote code execution and total takeover of corporate email platforms.
Source: htdarkreading.com