A security update has been released for Exchange 2013 to solve 3 vulnerabilities. The exploitation risk for all vulnerabilities have been categorized as “Less Likely” but Exchange administrators are advised to update at the earliest possible convenience anyway. A restart is not required.
The most severe vulnerability requires the user to click on a link to a specially crafted website and could result in which elevation of privilege.
View: Microsoft Security Bulletin MS15-064 – Important
View: Download information for KB3062157 (MS15-064)