Live › vulnerability › CVE-2022-41080
Go to dashboardMicrosoft Exchange Server has a privilege escalation flaw that lets an attacker gain higher rights on the server. It is chained with CVE-2022-41082, which allows remote code execution, and it is listed as exploited in the wild with ransomware use noted.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Exchange Server | vendor | – | – |
| microsoft exchange server | vendor | = 2013 | – |
| microsoft exchange server | vendor | = 2016 | – |
| microsoft exchange server | vendor | = 2019 | – |
Unknown from the sources.
Apply the Microsoft Exchange Server updates per vendor instructions, as CISA requires.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.
CISA required action: Apply updates per vendor instructions.
This page as .md · .json · in your agent: get_signal("CVE-2022-41080")
CISA KEV catalog, Creative Commons 0 · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.