CVE-2022-21980

CVE-2022-21980 is a high-severity Elevation of Privilege vulnerability affecting Microsoft Exchange Server. With a CVSS score of 8.0, it allows an authenticated attacker to achieve high impact on confidentiality, integrity, and availability through a low-complexity network attack requiring user interaction. While not currently listed in CISA's KEV catalog and lacking public exploit code in Metasploit or ExploitDB, its EPSS score and FAUCET Risk Score indicate a notable potential for exploitation. The vulnerability has garnered significant community attention and media coverage, highlighting its importance despite the absence of documented active exploitation.