CVE-2022-41080
Microsoft Exchange Server 2013 … 2019
Raw vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HSummary
CVE-2022-41080 is a high-severity an unspecified weakness vulnerability in Microsoft Exchange Server. Its CVSS base score is 8.8 (High).
Operationally, ranked in the top 0.5% of CVEs by exploit likelihood; CISA has added it to the Known Exploited Vulnerabilities catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
Microsoft Exchange Server contains an elevation of privilege vulnerability tracked as CVE-2022-41080. The flaw received a CVSS 3.1 base score of 8.8, reflecting a network-accessible attack that requires only low privileges and no user interaction to obtain full confidentiality, integrity, and availability impact on affected systems.
An authenticated attacker with low-privileged access to an Exchange deployment can exploit the issue to elevate rights and perform actions that would otherwise be restricted, such as accessing or modifying sensitive mailbox data and server configuration.
Microsoft has published security updates addressing the vulnerability through its update guide, and CISA has added CVE-2022-41080 to its catalog of known exploited vulnerabilities, confirming in-the-wild exploitation. The associated EPSS score remains consistently high, with a current value of 0.9379 and a peak of 0.9381.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-44324
Vulnerability Data
Microsoft Exchange Server Elevation of Privilege Vulnerability
- CWE(s)
- KEV Date Added
- 10 January 2023
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.