CVE-2022-41079

Improper verification of cryptographic signature in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

A vulnerability in Microsoft Exchange Server involves inclusion of functionality from an untrusted control sphere. An authorized attacker can elevate privileges locally.

A deserialization of untrusted data vulnerability in Microsoft Exchange Server allows an authorized attacker to elevate privileges locally.

Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Stack-based buffer overflow in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network.

Improper neutralization of input during web page generation (cross-site scripting) in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network.

A cross-site scripting (XSS) vulnerability in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network. The flaw is due to improper neutralization of input during web page generation.

A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Exchange Server allows an authorized attacker to disclose information over a network.