Microsoft · Exchange Server

CVE-2022-41080

Microsoft Exchange Server Elevation of Privilege Vulnerability

Exploited in attacks Used by ransomware High 8.8 Attack chance: 77%

What it is

Microsoft Exchange Server Elevation of Privilege Vulnerability

CISA: Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.

What to do

Apply updates per vendor instructions.

Deadline for US federal agencies: January 31, 2023

msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41080

Added to the CISA list: January 10, 2023
Published: November 9, 2022
Severity: High 8.8 CVSS 3.1
Chance of attacks in the next 30 days (EPSS): 77% in the top 0.4% of all known vulnerabilities
More details: NVD · CVE.org · CISA

More exploited flaws from Microsoft

Added	Vulnerability	Product	Severity	Attack chance
Apr 13, 2026	Deserialization of Untrusted DataCVE-2023-21529used by ransomware	Exchange Server	High 8.8	59%
Aug 21, 2024	Information DisclosureCVE-2021-31196	Exchange Server	High 7.2	54%
Feb 15, 2024	Privilege EscalationCVE-2024-21410	Exchange Server	Critical 9.8	13%
Sep 30, 2022	Server-Side Request ForgeryCVE-2022-41040used by ransomware	Exchange Server	High 8.8	>99.9%
Sep 30, 2022	Remote Code ExecutionCVE-2022-41082used by ransomware	Exchange Server	High 8.0	>99.9%
Mar 3, 2022	Privilege EscalationCVE-2018-8581used by ransomware	Exchange Server	High 7.4	27%
Jan 18, 2022	Information DisclosureCVE-2021-33766	Exchange Server	High 7.3	98%
Nov 3, 2021	Validation Key Remote Code ExecutionCVE-2020-0688used by ransomware	Exchange Server	High 8.8	>99.9%

All of them →

Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.