Tech Times

Exchange Server OWA Zero-Day CVE-2026-42897 Exploited With No Permanent Patch and New Mitigation Gaps

Microsoft confirmed on May 14 that CVE-2026-42897 — a cross-site scripting flaw in the Outlook Web Access component of Exchange Server 2016, 2019, and Subscription Edition — is under active ...
SecurityWeek

Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild

Microsoft is working to patch CVE-2026-42897, an Exchange Server zero-day vulnerability that has been exploited in attacks.
Windows Report

Exchange Server 2016 And 2019 Hit By Critical OWA Vulnerability

Microsoft warned Exchange Server customers about critical OWA vulnerability CVE-2026-42897 affecting on-premises deployments.

Microsoft warns of Exchange zero-day flaw exploited in attacks

On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow ...
Visual Studio Magazine

Microsoft Axing VBScript in Favor of JavaScript/PowerShell: Here's the Timeline

Microsoft is deprecating VBScript in favor of "more advanced" alternatives like JavaScript and PowerShell. The company today (May 30) detailed how the phase-out will occur in three stages, the final ...
InfoWorld

Node.js welcomes Microsoft’s Chakra JavaScript engine

Node has traditionally been focused on Google's V8 JavaScript engine, but adding ChakraCore support will allow developers to target more platforms Microsoft on Tuesday submitted a pull request to Node ...