Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
mscveMicrosoftMS:CVE-2023-29324
HistoryMay 09, 2023 - 7:00 a.m.

Windows MSHTML Platform Security Feature Bypass Vulnerability

2023-05-0907:00:00
Microsoft
msrc.microsoft.com
109
windows security bypass vulnerability

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.867

Percentile

98.7%

JSON

Affected configurations

Vulners
Node
microsoftwindows_server_2012Range<6.3.9600.20969r2
OR
microsoftwindows_server_2012Range<6.3.9600.20969r2
OR
microsoftwindows_server_2012Range<1.1.0.0r2
OR
microsoftwindows_server_2012Range<6.3.9600.20969r2
OR
microsoftwindows_server_2012Range<6.3.9600.20969r2
OR
microsoftwindows_server_2012Range<1.1.0.0r2
OR
microsoftwindows_server_2012Range<6.2.9200.24266
OR
microsoftwindows_server_2012Range<6.2.9200.24266
OR
microsoftwindows_server_2012Range<1.1.0.0
OR
microsoftwindows_server_2012Range<6.2.9200.24266
OR
microsoftwindows_server_2012Range<6.2.9200.24266
OR
microsoftwindows_server_2012Range<1.1.0.0
OR
microsoftwindows_server_2008Range<6.1.7601.26519r2
OR
microsoftwindows_server_2008Range<6.1.7601.26519r2
OR
microsoftwindows_server_2008Range<1.1.0.0r2
OR
microsoftwindows_server_2008Range<6.1.7601.26519r2
OR
microsoftwindows_server_2008Range<6.1.7601.26519r2
OR
microsoftwindows_server_2008Range<1.1.0.0r2
OR
microsoftwindows_server_2008Range<6.0.6003.22070sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22070sp2
OR
microsoftwindows_server_2008Range<1.1.0.0sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22070sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22070sp2
OR
microsoftwindows_server_2008Range<1.1.0.0sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22070sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22070sp2
OR
microsoftwindows_server_2008Range<1.1.0.0sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22070sp2
OR
microsoftwindows_server_2008Range<6.0.6003.22070sp2
OR
microsoftwindows_server_2008Range<1.1.0.0sp2
OR
microsoftwindows_server_2016Range<10.0.14393.5921
OR
microsoftwindows_server_2016Range<10.0.14393.5921
OR
microsoftwindows_10_1607Range<10.0.14393.5921
OR
microsoftwindows_10_1607Range<10.0.14393.5921
OR
microsoftwindows_10_1507Range<10.0.10240.19926
OR
microsoftwindows_10_1507Range<10.0.10240.19926
OR
microsoftwindows_10_22h2Range<10.0.19045.2965
OR
microsoftwindows_10_22h2Range<10.0.19045.2965
OR
microsoftwindows_10_22h2Range<10.0.19045.2965
OR
microsoftwindows_11_22h2Range<10.0.22621.1702
OR
microsoftwindows_11_22h2Range<10.0.22621.1702
OR
microsoftwindows_10_21h2Range<10.0.19044.2965
OR
microsoftwindows_10_21h2Range<10.0.19044.2965
OR
microsoftwindows_10_21h2Range<10.0.19044.2965
OR
microsoftwindows_11_21h2Range<10.0.22000.1936
OR
microsoftwindows_11_21h2Range<10.0.22000.1936
OR
microsoftwindows_10_20h2Range<10.0.19042.2965
OR
microsoftwindows_10_20h2Range<10.0.19042.2965
OR
microsoftwindows_server_2022Range<10.0.20348.1726
OR
microsoftwindows_server_2022Range<10.0.20348.1724
OR
microsoftwindows_server_2022Range<10.0.20348.1726
OR
microsoftwindows_server_2022Range<10.0.20348.1724
OR
microsoftwindows_server_2019Range<10.0.17763.4377
OR
microsoftwindows_server_2019Range<10.0.17763.4377
OR
microsoftwindows_10_1809Range<10.0.17763.4377
OR
microsoftwindows_10_1809Range<10.0.17763.4377
OR
microsoftwindows_10_1809Range<10.0.17763.4377
VendorProductVersionCPE
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:r2:*:*:*:*:*:*
microsoftwindows_server_2012*cpe:2.3:o:microsoft:windows_server_2012:*:*:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:r2:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:sp2:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:*:*
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
microsoftwindows_11_22h2*cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
microsoftwindows_10_21h2*cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 151

Related

securelist 3
msrc 2
thn 18
cvelist 2
mskb 19
prion 2
nvd 2
talosblog 5
mscve 2
githubexploit 24
cve 2
attackerkb 1
openvas 6
mssecure 1
mmpc 1
nessus 13
trendmicroblog 1
cisa_kev 1
krebs 4
malwarebytes 2
trellix 4
kaspersky 3
qualysblog 4
avleonov 1
rapid7blog 3
securelist
securelist
Comprehensive analysis of initial attack samples exploiting CVE-2023-23397 vulnerability
2023-07-19 12:00:41
IT threat evolution Q3 2023
2023-12-01 10:00:09
IT threat evolution in Q1 2023. Non-mobile statistics
2023-06-07 08:00:18
msrc
msrc
Microsoft Mitigates Outlook Elevation of Privilege Vulnerability
2023-03-14 13:00:00
Microsoft Mitigates Outlook Elevation of Privilege Vulnerability
2023-03-14 13:00:00
thn
thn
Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft
2023-05-10 14:23:00
Beware: Experts Reveal New Details on Zero-Click Outlook RCE Exploits
2023-12-18 15:43:00
APT28 Targets Ukrainian Government Entities with Fake "Windows Update" Emails
2023-05-01 08:52:00
cvelist
cvelist
CVE-2023-29324 Windows MSHTML Platform Security Feature Bypass Vulnerability
2023-05-09 17:03:02
CVE-2023-23397 Microsoft Outlook Elevation of Privilege Vulnerability
2023-03-14 16:55:28
mskb
mskb
KB5026366: Cumulative security update for Internet Explorer: May 9, 2023
2023-05-09 07:00:00
Description of the security update for Outlook 2013: March 14, 2023 (KB5002265)
2023-03-14 07:00:00
Description of the security update for Outlook 2016: March 14, 2023 (KB5002254)
2023-03-14 07:00:00
prion
prion
Security feature bypass
2023-05-09 18:15:00
Privilege escalation
2023-03-14 17:15:00
nvd
nvd
CVE-2023-29324
2023-05-09 18:15:13
CVE-2023-23397
2023-03-14 17:15:13
talosblog
talosblog
Threat Advisory: Microsoft Outlook privilege escalation vulnerability being exploited in the wild
2023-03-15 23:46:33
Threat Source newsletter (March 16, 2023) — A deep dive into Talos' work in Ukraine
2023-03-16 18:00:15
Threat Source newsletter (March 23, 2023) — Meta is threatening to ban news sharing in Canada. Good.
2023-03-23 18:00:16
mscve
mscve
Microsoft Outlook Elevation of Privilege Vulnerability
2023-03-14 07:00:00
Microsoft Exchange Server Elevation of Privilege Vulnerability
2024-02-13 08:00:00
githubexploit
githubexploit
Exploit for Authentication Bypass by Capture-replay in Microsoft
2023-03-20 17:45:37
Exploit for Authentication Bypass by Capture-replay in Microsoft
2023-03-17 03:38:50
Exploit for Authentication Bypass by Capture-replay in Microsoft
2023-03-16 19:10:37
cve
cve
CVE-2023-29324
2023-05-09 18:15:13
CVE-2023-23397
2023-03-14 17:15:13
attackerkb
attackerkb
CVE-2023-23397
2023-03-14 00:00:00
openvas
openvas
Microsoft Outlook 2013 Service Pack 1 Elevation of Privilege Vulnerability (KB5002265)
2023-03-15 00:00:00
Microsoft Outlook 2016 Elevation of Privilege Vulnerability (KB5002254)
2023-03-15 00:00:00
Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Mar 2023)
2023-03-15 00:00:00
mssecure
mssecure
Guidance for investigating attacks using CVE-2023-23397
2023-03-24 18:30:00
mmpc
mmpc
Guidance for investigating attacks using CVE-2023-23397
2023-03-24 18:30:00
nessus
nessus
Security Updates for Outlook (March 2023)
2023-03-14 00:00:00
Security Updates for Outlook C2R Elevation of Privilege (March 2023)
2023-03-16 00:00:00
KB5026427: Windows Server 2008 Security Update (May 2023)
2023-05-09 00:00:00
trendmicroblog
trendmicroblog
Patch CVE-2023-23397 Immediately: What You Need To Know and Do
2023-03-21 00:00:00
cisa_kev
cisa_kev
Microsoft Office Outlook Privilege Escalation Vulnerability
2023-03-14 00:00:00
krebs
krebs
Microsoft Patch Tuesday, March 2023 Edition
2023-03-15 15:19:32
Microsoft Patch Tuesday, December 2023 Edition
2023-12-12 22:21:00
Microsoft Patch Tuesday, July 2024 Edition
2024-07-09 19:50:33
malwarebytes
malwarebytes
How Outlook notification sounds can lead to zero-click exploits
2023-12-21 21:28:01
Update now! Microsoft fixes two zero-day bugs
2023-03-15 01:00:00
trellix
trellix
CVE-2023-23397: The Notification Sound You Don’t Want to Hear
2023-03-17 00:00:00
CVE-2023-23397: The Notification Sound You Don’t Want to Hear
2023-03-17 00:00:00
The Bug Report - March 2023 Edition
2023-04-05 00:00:00
kaspersky
kaspersky
KLA48560 Multiple vulnerabilities in Microsoft Office
2023-03-14 00:00:00
KLA49156 Multiple vulnerabilities in Microsoft Products (ESU)
2023-05-09 00:00:00
KLA49154 Multiple vulnerabilities in Microsoft Windows
2023-05-09 00:00:00
qualysblog
qualysblog
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
Microsoft and Adobe Patch Tuesday, May 2023 Security Update Review
2023-05-09 21:24:08
avleonov
avleonov
Microsoft Patch Tuesday March 2023: Outlook EoP, MOTW Bypass, Excel DoS, HTTP/3 RCE, ICMP RCE, RPC RCE
2023-03-27 00:25:37
rapid7blog
rapid7blog
Patch Tuesday - May 2023
2023-05-09 20:02:02
Patch Tuesday - September 2023
2023-09-12 22:55:55
Patch Tuesday - March 2023
2023-03-14 23:46:44

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.867

Percentile

98.7%

JSON
Related for MS:CVE-2023-29324
securelist3msrc2thn18cvelist2mskb19prion2nvd2talosblog5mscve2githubexploit24cve2attackerkb1openvas6mssecure1mmpc1nessus13trendmicroblog1cisa_kev1krebs4malwarebytes2trellix4kaspersky3qualysblog4avleonov1rapid7blog3