CVE-2022-41082

This vulnerability lets an attacker break into your Microsoft Exchange Server and run their own code on it, not just read data or cause an error.
Think of Exchange like your company’s mailroom and mail-routing system—if someone can run code on the mail server, they may be able to take over the whole building, steal messages, and disrupt operations.

This matters if you run Microsoft Exchange Server (including Exchange deployments on the affected cumulative update levels). The issue enables remote code execution without user interaction, and attackers can reach it from the network rather than needing a user to click anything.
It’s a risk where the vulnerable Exchange server is reachable (notably from an adjacent network path) and the attacker can leverage the required low-privilege conditions for exploitation.

This is RED because it has confirmed real-world exploitation and was used in ransomware campaigns (CISA KEV). The goal of attackers is to run code on your Exchange server and take control, leading to full compromise and operational disruption.
Treat it as an urgent, time-critical patching issue for any organization running the affected Microsoft Exchange Server cumulative updates.