How Outlook notification sounds can lead to zero-click exploits

🗓️ 21 Dec 2023 21:28:01Reported by Malwarebytes blogType

malwarebytes

malwarebytes🔗 www.malwarebytes.com👁 66 Views

Two vulnerabilities in Windows led to zero-click Outlook exploits, chains CVEs 35384 and 36710, now patched

Reporter	Title	Published	Views	Family All 189
GithubExploit	Exploit for Improper Input Validation in Microsoft	21 Mar 202318:38	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Microsoft	19 Mar 202308:07	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Microsoft	7 May 202318:21	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Microsoft	20 Mar 202316:31	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Microsoft	7 Apr 202502:33	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Microsoft	20 Mar 202409:49	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Microsoft	31 Mar 202303:35	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Microsoft	17 Mar 202310:18	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Microsoft	7 Apr 202502:33	–	githubexploit
GithubExploit	Exploit for Improper Input Validation in Microsoft	16 Mar 202319:10	–	githubexploit

21 Dec 2023 21:28Current

8.4High risk

Vulners AI Score8.4

EPSS0.97408

outlook zero-click exploits cve-35384 cve-36710 windows rce patch smb security