Critical 1 exploited CVE MSRC-CVE-2022-41080 1 CVE

Microsoft Exchange Server Elevation of Privilege Vulnerability

Published Nov 8, 2022 · Updated Dec 15, 2022 · Revision 2

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Critical. Not known to be exploited — Exploitation More Likely. Customer action: Required.

Details

Security updates
15.01.2507.016 — https://support.microsoft.com/help/5019758

Vulnerabilities 1

High 8.8

CVE-2022-41080 Exploited · Ransomware Public exploit EPSS 77%

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Exchange Server Elevation of Privilege Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12

Nov 9, 2022
KEV Jan 10, 2023

Revision history

2022-12-15 #2
Added an acknowledgement. This is an informational change only.
2022-11-08 #1
Information published.

References

CVE-2022-41080 Microsoft Exchange Server Elevation of Privilege Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41080
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss