You're an admin! You're an admin! You're all admins, thanks to this Microsoft Exchange zero-day and exploit

Easily swapped hashed passwords gives Domain Admin rights via API call. Fix may land next month

Microsoft Exchange appears to be currently vulnerable to a privilege escalation attack that allows any user with a mailbox to become a Domain Admin."