A zero-day vulnerability exists in Microsoft Exchange, which attackers are already exploiting. Admins should act quickly.