CVE Watch10 de ago. de 2026

CVE-2022-41080

Microsoft Exchange Server Privilege Escalation Vulnerability

CVSS

8.8

Alta

EPSS

77.3%

p100

KEV

SIM

10 de jan. de 2023

Exploit Today

0-100

Publicado: 9 de nov. de 2022 · Última mod.: 10 de ago. de 2026

EPSS · 30d

77.3%EPSS · 30 dias77.3%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Microsoft / Exchange Server

Vulnerabilidade

Microsoft Exchange Server Privilege Escalation Vulnerability

Adicionado ao KEV

10 de jan. de 2023

Corrigir até

31 de jan. de 2023

Uso conhecido em ransomware

Sim

Descrição resumida

Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.

Ação necessária

Apply updates per vendor instructions.

Notas

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2022-41080; https://nvd.nist.gov/vuln/detail/CVE-2022-41080

Descrição técnica

Microsoft Exchange Server Elevation of Privilege Vulnerability

Referências oficiais

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2023-215298.8 ALT

99.1%

KEV—80Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability78d CVE-2021-345239.0 CRÍ

100.0%

KEV—80Microsoft Exchange Server Privilege Escalation Vulnerability87d CVE-2021-344739.1 CRÍ

100.0%

KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability87d CVE-2021-337667.3 ALT

99.9%

KEV—80Microsoft Exchange Server Information Disclosure87d CVE-2021-311967.2 ALT

99.0%

KEV—80Microsoft Exchange Server Information Disclosure Vulnerability87d CVE-2021-270657.8 ALT

100.0%

KEV—80Microsoft Exchange Server Remote Code Execution Vulnerability35d