Microsoft is actively investigating a series of intermittent mailbox access disruptions affecting Outlook mobile and macOS users connected to Exchange Online services. The issue manifests as sporadic failures in accessing mailboxes, leading to potential disruption of email communications for impacted users.

The root cause appears linked to Exchange Online's authentication and mailbox routing processes, potentially involving a logic flaw in session management or token validation. Though no public CVE ID has been assigned yet, Microsoft has acknowledged the problem publicly and is working on a resolution. The exact technical nature of the flaw, including vulnerability type or CVSS score, remains undisclosed.

From an attack vector perspective, the issue primarily affects clients using Outlook mobile applications and Outlook for macOS when connecting to Exchange Online. This vector suggests a possible flaw in how Exchange Online handles device or platform-specific mailbox access requests.

Real-world impact involves intermittent mailbox access failures, which disrupt normal email operations and could affect organizational productivity. While no evidence currently links this issue to exploitation by threat actors, the inconsistent access undermines the reliability of Exchange Online services for mobile and macOS users.

Microsoft advises affected organizations and end-users to monitor the Microsoft 365 Service Health dashboard for updates. Pending the release of a formal patch, temporary mitigations include using Outlook on other supported platforms such as Windows desktop or web clients to maintain mailbox accessibility.

Security teams should track this issue closely, given Exchange Online's critical role in enterprise communications. Applying updates and patches as soon as Microsoft releases them will be essential to restore full mailbox access and prevent potential escalation or exploitation scenarios.

For detailed guidance, administrators should consult Microsoft's official communications and support channels. Continuous monitoring and incident response readiness remain crucial until the issue is fully resolved.

Related: