CVE-2022-41082

HighCVSS 8.0/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft Exchange Server Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Oct 3, 2022
Last modified
Jun 17, 2026
Added to CISA KEV
Sep 30, 2022
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-410837.8Visual Studio Code Elevation of Privilege VulnerabilityCVE-2022-410857.5Azure CycleCloud Elevation of Privilege VulnerabilityCVE-2022-410866.4Windows Group Policy Elevation of Privilege VulnerabilityCVE-2022-410888.1Windows Point-to-Point Tunneling Protocol Remote Code Execution VulnerabilityCVE-2022-410897.8.NET Framework Remote Code Execution VulnerabilityCVE-2022-41092.7The Wholesale Market for WooCommerce WordPress plugin before 2.0.0 does not validate user input against path traversal attacks, allowing higCVE-2022-410905.9Windows Point-to-Point Tunneling Protocol Denial of Service VulnerabilityCVE-2022-410915.4Windows Mark of the Web Security Feature Bypass VulnerabilityCVE-2022-410927.8Windows Win32k Elevation of Privilege VulnerabilityCVE-2022-410937.8Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityCVE-2022-410947.8Windows Hyper-V Elevation of Privilege VulnerabilityCVE-2022-410957.8Windows Digital Media Receiver Elevation of Privilege Vulnerability
CVE-2022-41082: High severity, CVSS 8.0 | Vulnix