mykel1982 Please check the Security Update Guide; CVEs that require Extended Protection will be marked with that in the FAQ. MSRC team documents this in CVEs.
ex887 Our SUs are cumulative. But in May, you needed to run /preparealldomains manually after installation. This (and any other manual action) still needs to be done after August 2022 SU installation if it was not done after May 2022 SU. If /preparealldomains was run after May 2022 SU, you do not need to re-run it after August 2022 SU. I have addd a FAQ to the blog post now on this.
Martin_Aigner EDIT: only on-prem.
DavidH38 Modern Hybrid only, as per this.
piwex69 It depends on what you mean by "Exchange Transport role". Assuming you mean the Edge role (as opposed to transport on any mailbox server) then no, EP does not apply to Edge servers as per this.