VulnRadar

Data against noise.

Built with NaN
Page generated: 09 Nov 2026, 02:44 UTC
← Dashboard

CVE-2022-41082

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS 8.0 (HIGH) KEV: KNOWN CATALOG

Attention and evidence

HYPE SCORE
0.0/10
REALITY · THREAT PRIORITY
8.7/10
General review priority; not probability

Evidence confidence: Exploitation recorded

Why this priority?
  • Recorded exploitation baseline: +7.00
  • Technical severity: CVSS 8: +1.20
  • Fresh EPSS: 99.97%: +0.50

General review priority, not probability, victim count or asset-specific risk. A range covers missing CVSS/EPSS inputs within the current evidence state.

Sources: 17 documents and public datasets.

Hype components

Headline sample (25%)
0/100
Press, 30 days (60%)
0/100
Grounded branding (15%)
0/100
HYPE TOTAL0/100

Sources and documents

The Hacker News
Press · 06 Jan 2023, 08:00 · Rackspace Confirms Play Ransomware Gang Responsible for Recent Breach - The Hacker News
TechTarget
Press · 04 Jan 2023, 08:00 · Rackspace: Ransomware attack caused by zero-day exploit - TechTarget
TechTarget
Press · 04 Jan 2023, 08:00 · Rackspace: Ransomware attack caused by zero-day exploit - TechTarget
Cybersecurity Dive
Press · 03 Jan 2023, 08:00 · Rackspace identifies ransomware threat actor behind December attack via Exchange - Cybersecurity Dive
wiz.io
Press · 22 Dec 2022, 08:00 · OWASSRF, a new exploit for Exchange vulnerabilities, exploited in the wild: everything you need to know - wiz.io
See all 17 source documents
Rapid7
Press · 21 Dec 2022, 08:00 · CVE-2022-41080, CVE-2022-41082: Rapid7 Observed Exploitation of `OWASSRF` in Exchange for RCE - Rapid7
Help Net Security
Press · 21 Dec 2022, 08:00 · New Microsoft Exchange exploit chain lets ransomware attackers in (CVE-2022-41080) - Help Net Security
The Hacker News
Press · 21 Dec 2022, 08:00 · Ransomware Hackers Using New Way to Bypass MS Exchange ProxyNotShell Mitigations - The Hacker News
Securelist
Press · 19 Dec 2022, 08:00 · CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange - Securelist
Arctic Wolf
Press · 10 Oct 2022, 07:00 · CVE-2022-41040 & CVE-2022-41082 - Arctic Wolf
Unit 42
Press · 04 Oct 2022, 07:00 · Threat Brief: CVE-2022-41040 and CVE-2022-41082: Microsoft Exchange Server (ProxyNotShell) - Unit 42
Help Net Security
Press · 03 Oct 2022, 07:00 · MS Exchange zero-days: The calm before the storm? - Help Net Security
Hong Kong Computer Emergency Response Team Coordination Centre
Press · 30 Sep 2022, 07:00 · Microsoft Exchange Zero-day Remote Code Execution Vulnerabilities - Hong Kong Computer Emergency Response Team Coordination Centre
Microsoft
Press · 30 Sep 2022, 07:00 · Analyzing attacks using the Exchange vulnerabilities CVE-2022-41040 and CVE-2022-41082 - Microsoft
Infosecurity Magazine
Press · 30 Sep 2022, 07:00 · Microsoft Confirms Two Exchange Zero-Day Vulnerabilities - Infosecurity Magazine
GreyNoise
Press · 30 Sep 2022, 07:00 · Microsoft Exchange ProxyNotShell 0-Day Vulnerability - GreyNoise
SOC Prime
Press · 30 Sep 2022, 07:00 · ProxyNotShell: Detecting CVE-2022-41040 and CVE-2022-41082, Novel Microsoft Exchange Zero-Day Vulnerabilities Actively Exploited in the Wild - SOC Prime

Score evolution

● Hype   ● Reality

Earlier evidence-support scores are retained in history; this chart shows only the current priority definition.

First record: hype 0.0 · reality 8.7 (2026-11-02 15:13). The curve appears once the score changes.

Public exploit evidence

3

Public exploit entries / repo candidates

See 3 repos with metrics
RepositoryStarsForksLanguageUpdated
balki97/OWASSRF-CVE-2022-41082-POC9235Python10 Jan 2023, 08:09
soltanali0/CVE-2022-4108230Python24 Oct 2024, 15:39
bigherocenter/CVE-2022-41082-POC10Python21 Feb 2023, 02:59
Evidence context and dated references

Reality is general threat/review priority, combining observed exploitation, CVSS severity and fresh EPSS. Evidence confidence is separate. This is not calibrated risk, a victim count or an asset-specific assessment. A range reflects missing numeric inputs.

Evidence in context

Confidence in exploitation evidence
Exploitation recorded
Priority basis
Recorded exploitation; CVSS 8; EPSS 100.0%
Attention, last 30 days
0 distinct story titles; 0 press documents; 0 publisher domains.
Technical potential
adjacent access, low privileges, no user interaction.
Observed activity
Exploitation recorded in CISA KEV.
Known scale
Not quantified.
Evidence confidence basis
Trusted exploitation confirmation

Score evaluated: 2026-11-05 13:58:43.617123+00:00 · EPSS snapshot: 2026-11-05T12:03:04Z

Source event timeline
Added to the CISA KEV catalog
30 Sep 2022, 00:00
First press mention
30 Sep 2022, 07:00
Published
03 Oct 2022, 00:00
Latest press mention
06 Jan 2023, 08:00
Score calculated
05 Nov 2026, 13:58
PoCs on GitHub
3 repositories
Source: CVE List V5 · CISA KEV · FIRST EPSS · GitHub · RSSVulnRadar