CVE-2022-41080
KEV · RansomwareMicrosoft Exchange Server Privilege Escalation Vulnerability
View CVE record →- Vendor / Project
- Microsoft
- Product
- Exchange Server
- Date added
- Jan 10, 2023
- Due date
- Jan 31, 2023
- Known ransomware use
- Known
- CWEs
- —
Description
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation. This vulnerability is chainable with CVE-2022-41082, which allows for remote code execution.
Required action
Apply updates per vendor instructions.