coldbraid

CVE-2022-41080 Microsoft Exchange Server

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.

CVSS
not scored

On CISA’s exploited list

Microsoft Exchange Server Privilege Escalation Vulnerability

Added
2023-01-10
Federal patch deadline
2023-01-31
Ransomware use
known