Actively exploited in the wild

Microsoft Exchange Server Privilege Escalation Vulnerability

Microsoft - Exchange Server · Listed in the CISA KEV since 2023-01-10. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2022-41080

HighCVSS 8.8KEV

Published: 09/11/2022(UTC)Updated: 10/08/2026(UTC)Translated: 10/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

77.33%

100th percentile - higher than 100% of all known CVEs

Elevation of privilege vulnerability in Microsoft Exchange Server. Allows an attacker to elevate their privileges in the system.

An attacker can gain higher privileges, potentially leading to unauthorized access to data and systems.

Install the latest security updates provided by Microsoft for Exchange Server.

Original NVD description (English source)

Microsoft Exchange Server Elevation of Privilege Vulnerability