Lucene search
Microsoft Security Response CenterMSRC:644966B4D83B650C284EC9D93664582DHistorySep 30, 2022 - 7:00 a.m.
Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server
2022-09-3007:00:00
Microsoft Security Response Center
link
16
0.967 High
EPSS
Percentile
99.7%
November 8, 2022 update - Microsoft released security updates for CVE-2022-41040 and CVE-2022-41082. We recommend that customers protect their organizations by applying the updates immediately to affected systems. The options described in the Mitigations section are no longer recommended. For more information, review the Exchange Team blog. Summary Summary On November 8 Microsoft released security updates for two zero-day vulnerabilities affecting Microsoft Exchange Server 2013, Exchange Server 2016, and Exchange Server 2019.
Related
thn
thn
cisa
cisa
checkpoint_advisories
checkpoint_advisories
wordfence
wordfence
msrc
msrc
cisa_kev
cisa_kev
Microsoft Exchange Server Remote Code Execution Vulnerability
2022-09-30 00:00:00
Microsoft Exchange Server Server-Side Request Forgery Vulnerability
2022-09-30 00:00:00
Microsoft Exchange Server Privilege Escalation Vulnerability
2023-01-10 00:00:00
mssecure
mssecure
nessus
nessus
Security Updates for Microsoft Exchange Server (Nov 2022)
2022-11-11 00:00:00
packetstorm
packetstorm
Microsoft Exchange ProxyNotShell Remote Code Execution
2022-11-30 00:00:00
rapid7blog
rapid7blog
CVE-2022-41040 and CVE-2022-41082: Unpatched Zero-Day Vulnerabilities in Microsoft Exchange Server
2022-09-29 20:50:50
Metasploit Weekly Wrap-Up
2022-12-02 21:00:13
attackerkb
attackerkb
qualysblog
qualysblog
cert
cert
talosblog
talosblog
hackread
hackread
Microsoft Confirms Two 0-Days Being Exploited Against Exchange Servers
2022-09-30 17:56:35
krebs
krebs
Microsoft: Two New 0-Day Flaws in Exchange Server
2022-09-30 16:51:57
Patch Tuesday, November 2022 Election Edition
2022-11-09 01:50:14
malwarebytes
malwarebytes
[updated]Two new Exchange Server zero-days in the wild
2022-09-30 13:00:00
Rackspace confirms it suffered a ransomware attack
2022-12-08 12:00:00
hivepro
hivepro
Unpatched zero-day vulnerabilities of Microsoft Exchange Server
2022-09-30 10:21:56
kaspersky
kaspersky
KLA19264 Multiple vulnerabilities in Microsoft Server Software
2022-09-30 00:00:00
akamaiblog
akamaiblog
metasploit
metasploit
Microsoft Exchange ProxyNotShell RCE
2022-11-18 22:00:27
mmpc
mmpc
impervablog
impervablog
Microsoft Exchange Server Vulnerabilities CVE-2022-41040 and CVE-2022-41082
2022-09-30 16:47:34
ics
ics
#StopRansomware: Play Ransomware
2023-12-18 12:00:00
2022 Top Routinely Exploited Vulnerabilities
2023-08-03 12:00:00
githubexploit
githubexploit
Exploit for CVE-2022-41082
2022-10-03 05:57:11
Exploit for CVE-2022-41082
2022-09-30 20:59:46
Exploit for Deserialization of Untrusted Data in Microsoft
2022-12-22 09:35:26
cnvd
cnvd
zdi
zdi
prion
prion
Remote code execution
2022-10-03 01:15:00
Privilege escalation
2022-10-03 01:15:00
cvelist
cvelist
mscve
mscve
Microsoft Exchange Server Elevation of Privilege Vulnerability
2022-09-30 07:00:00
Microsoft Exchange Server Remote Code Execution Vulnerability
2022-09-30 07:00:00
nvd
nvd
CVE-2022-41040
2022-10-03 01:15:08
CVE-2022-41082
2022-10-03 01:15:08
hackerone
hackerone
cve
cve
CVE-2022-41082
2022-10-03 01:15:08
CVE-2022-41040
2022-10-03 01:15:08
securelist
securelist
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
IT threat evolution in Q3 2022. Non-mobile statistics
2022-11-18 08:10:34
mskb
mskb
trellix
trellix
The Bug Report October 2022 Edition
2022-11-02 00:00:00
The Bug Report October 2022 Edition
2022-11-02 00:00:00
wizblog
wizblog
