NVD disclosure day

Published threat advisories for October 3, 2022

CVE advisoryKnown Exploit

CVE-2022-41082

Microsoft Exchange Server Remote Code Execution Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Microsoft Exchange Server has a vulnerability allowing authenticated attackers to execute remote code, potentially leading to data compromise and service disruption. This issue is documented as being exploited, presenting a realistic business risk to affected organizations.

NVD published: • CISA KEV
CVE advisoryKnown Exploit

CVE-2022-41040

Microsoft Exchange Server Information Disclosure Vulnerability

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

Microsoft Exchange Server has an elevation of privilege vulnerability that allows unauthorized access and control. This could lead to data compromise and operational disruption for affected organizations. The realistic business risk involves potential unauthorized access to sensitive information and system control.

NVD published: • CISA KEV