The other two zero days being patched are CVE-2024-49040, a flaw in Exchange rated “important” that could allow an attacker ...