sign in--:--:--UTC

CVE-2022-41082

exploited in the wild☆ pin

CVSS

—

Reports

9

First seen

Sep 29, 2022

Last seen

Jul 15, 2026

Affected product

Microsoft Exchange Server

Associated actors

StrikeShark ×3 APT36 ×1 C0XMO ×1 Lazarus Group ×1 Qilin ×1

Recent reports

StrikeShark Campaign Exploits Known Vulnerabilities to Deploy Cobalt Strike via SharkLoader

HKCERTJul 15, 2026 High

June 2026 CVE Landscape: 60 High-Impact Vulnerabilities Actively Exploited

Recorded Future InsiktJul 10, 2026 High

SharkLoader Malware Deploys Cobalt Strike in StrikeShark Campaign

The Hacker NewsJun 26, 2026 High

StrikeShark: New SharkLoader Campaign Delivering Cobalt Strike via Exploited Applications

Kaspersky SecurelistJun 24, 2026 Critical

OWASSRF Explained: Microsoft Exchange Exploit Chain CVE-2022-41080/41082

Huntress BlogDec 29, 2022 High

High Threat Security Alert: Multiple Vulnerabilities in Microsoft Products (November 2022)

GovCERT.HKNov 9, 2022 Critical

Microsoft Exchange Server ProxyNotShell RCE Vulnerabilities (CVE-2022-41040, CVE-2022-41082)

NICS TaiwanOct 6, 2022 Critical

Multiple Zero-Day Vulnerabilities in Microsoft Exchange Server

GovCERT.HKSep 30, 2022 Critical

New 0-Day Vulnerabilities Found in Microsoft Exchange

Huntress BlogSep 29, 2022

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign up See plans