Lucene search
MicrosoftMS:CVE-2023-23397HistoryMar 14, 2023 - 7:00 a.m.
Microsoft Outlook Elevation of Privilege Vulnerability
2023-03-1407:00:00
Microsoft
msrc.microsoft.com
142
outlook security vulnerability privilege elevation
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.867
Percentile
98.7%
Affected configurations
Node
microsoftoutlookRange<16.0.5387.1000
ORmicrosoftoutlookRange<15.0.5537.1000
ORmicrosoftoutlookRange<15.0.5537.1000
ORmicrosoftoutlookRange<15.0.5537.1000
ORmicrosoftofficeRange<https://aka.ms/OfficeSecurityReleases
ORmicrosoft365_appsRange<https://aka.ms/OfficeSecurityReleases
ORmicrosoftofficeRange<https://aka.ms/OfficeSecurityReleases
ORmicrosoft365_appsRange<https://aka.ms/OfficeSecurityReleases
ORmicrosoftoffice_long_term_servicing_channelRange<https://aka.ms/OfficeSecurityReleases
ORmicrosoftoutlookRange<16.0.5387.1000
ORmicrosoftoffice_long_term_servicing_channelRange<https://aka.ms/OfficeSecurityReleases
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | outlook | * | cpe:2.3:a:microsoft:outlook:*:*:*:*:*:*:*:* |
| microsoft | office | * | cpe:2.3:a:microsoft:office:*:*:*:*:*:*:*:* |
| microsoft | 365_apps | * | cpe:2.3:a:microsoft:365_apps:*:*:*:*:*:*:*:* |
| microsoft | office_long_term_servicing_channel | * | cpe:2.3:a:microsoft:office_long_term_servicing_channel:*:*:*:*:*:*:*:* |
Related
thn
thn
talosblog
talosblog
githubexploit
githubexploit
Exploit for Authentication Bypass by Capture-replay in Microsoft
2023-03-20 17:45:37
Exploit for Authentication Bypass by Capture-replay in Microsoft
2023-03-17 03:38:50
Exploit for Authentication Bypass by Capture-replay in Microsoft
2023-03-16 19:10:37
attackerkb
attackerkb
CVE-2023-23397
2023-03-14 00:00:00
openvas
openvas
mskb
mskb
prion
prion
Privilege escalation
2023-03-14 17:15:00
nvd
nvd
CVE-2023-23397
2023-03-14 17:15:13
mssecure
mssecure
Guidance for investigating attacks using CVE-2023-23397
2023-03-24 18:30:00
mmpc
mmpc
Guidance for investigating attacks using CVE-2023-23397
2023-03-24 18:30:00
nessus
nessus
Security Updates for Outlook (March 2023)
2023-03-14 00:00:00
Security Updates for Outlook C2R Elevation of Privilege (March 2023)
2023-03-16 00:00:00
trendmicroblog
trendmicroblog
Patch CVE-2023-23397 Immediately: What You Need To Know and Do
2023-03-21 00:00:00
cvelist
cvelist
CVE-2023-23397 Microsoft Outlook Elevation of Privilege Vulnerability
2023-03-14 16:55:28
cisa_kev
cisa_kev
Microsoft Office Outlook Privilege Escalation Vulnerability
2023-03-14 00:00:00
cve
cve
CVE-2023-23397
2023-03-14 17:15:13
securelist
securelist
Comprehensive analysis of initial attack samples exploiting CVE-2023-23397 vulnerability
2023-07-19 12:00:41
IT threat evolution Q3 2023
2023-12-01 10:00:09
IT threat evolution in Q1 2023. Non-mobile statistics
2023-06-07 08:00:18
krebs
krebs
Microsoft Patch Tuesday, March 2023 Edition
2023-03-15 15:19:32
Microsoft Patch Tuesday, December 2023 Edition
2023-12-12 22:21:00
Microsoft Patch Tuesday, July 2024 Edition
2024-07-09 19:50:33
msrc
msrc
Microsoft Mitigates Outlook Elevation of Privilege Vulnerability
2023-03-14 13:00:00
Microsoft Mitigates Outlook Elevation of Privilege Vulnerability
2023-03-14 13:00:00
mscve
mscve
Windows MSHTML Platform Security Feature Bypass Vulnerability
2023-05-09 07:00:00
Microsoft Exchange Server Elevation of Privilege Vulnerability
2024-02-13 08:00:00
malwarebytes
malwarebytes
How Outlook notification sounds can lead to zero-click exploits
2023-12-21 21:28:01
Update now! Microsoft fixes two zero-day bugs
2023-03-15 01:00:00
trellix
trellix
CVE-2023-23397: The Notification Sound You Don’t Want to Hear
2023-03-17 00:00:00
CVE-2023-23397: The Notification Sound You Don’t Want to Hear
2023-03-17 00:00:00
The Bug Report - March 2023 Edition
2023-04-05 00:00:00
kaspersky
kaspersky
KLA48560 Multiple vulnerabilities in Microsoft Office
2023-03-14 00:00:00
qualysblog
qualysblog
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
The March 2023 Patch Tuesday Security Update Review
2023-03-15 00:08:07
avleonov
avleonov
rapid7blog
rapid7blog
Patch Tuesday - September 2023
2023-09-12 22:55:55
Patch Tuesday - March 2023
2023-03-14 23:46:44
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.867
Percentile
98.7%
Related for MS:CVE-2023-23397