Lucene search
HistoryMar 14, 2023 - 5:15 p.m.
CVE-2023-23397
microsoft
outlook
privilege
vulnerability
cve-2023-23397
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.915 High
EPSS
Percentile
98.9%
Microsoft Outlook Elevation of Privilege Vulnerability
Affected configurations
Node
microsoft365_appsMatch-enterprise
ORmicrosoftofficeMatch2019
ORmicrosoftofficeMatch2021ltsc
ORmicrosoftoutlookMatch2013sp1
ORmicrosoftoutlookMatch2013sp1rt
ORmicrosoftoutlookMatch2016
Related
attackerkb
attackerkb
CVE-2023-23397
2023-03-14 00:00:00
mskb
mskb
githubexploit
githubexploit
Exploit for Authentication Bypass by Capture-replay in Microsoft
2023-03-15 17:03:38
Exploit for Authentication Bypass by Capture-replay in Microsoft
2023-03-22 11:00:47
Exploit for Authentication Bypass by Capture-replay in Microsoft
2023-03-18 21:44:46
openvas
openvas
mscve
mscve
Microsoft Outlook Elevation of Privilege Vulnerability
2023-03-14 07:00:00
Windows MSHTML Platform Security Feature Bypass Vulnerability
2023-05-09 07:00:00
Microsoft Exchange Server Elevation of Privilege Vulnerability
2024-02-13 08:00:00
talosblog
talosblog
thn
thn
prion
prion
Privilege escalation
2023-03-14 17:15:00
cisa_kev
cisa_kev
Microsoft Office Outlook Privilege Escalation Vulnerability
2023-03-14 00:00:00
cve
cve
CVE-2023-23397
2023-03-14 17:15:13
nessus
nessus
Security Updates for Outlook (March 2023)
2023-03-14 00:00:00
Security Updates for Outlook C2R Elevation of Privilege (March 2023)
2023-03-16 00:00:00
trendmicroblog
trendmicroblog
Patch CVE-2023-23397 Immediately: What You Need To Know and Do
2023-03-21 00:00:00
cvelist
cvelist
CVE-2023-23397 Microsoft Outlook Elevation of Privilege Vulnerability
2023-03-14 16:55:28
mmpc
mmpc
Guidance for investigating attacks using CVE-2023-23397
2023-03-24 18:30:00
mssecure
mssecure
Guidance for investigating attacks using CVE-2023-23397
2023-03-24 18:30:00
krebs
krebs
Microsoft Patch Tuesday, March 2023 Edition
2023-03-15 15:19:32
Microsoft Patch Tuesday, December 2023 Edition
2023-12-12 22:21:00
Fat Patch Tuesday, February 2024 Edition
2024-02-13 22:28:48
msrc
msrc
Microsoft Mitigates Outlook Elevation of Privilege Vulnerability
2023-03-14 13:00:00
Microsoft Mitigates Outlook Elevation of Privilege Vulnerability
2023-03-14 13:00:00
securelist
securelist
Comprehensive analysis of initial attack samples exploiting CVE-2023-23397 vulnerability
2023-07-19 12:00:41
IT threat evolution Q3 2023
2023-12-01 10:00:09
IT threat evolution in Q1 2023. Non-mobile statistics
2023-06-07 08:00:18
malwarebytes
malwarebytes
How Outlook notification sounds can lead to zero-click exploits
2023-12-21 21:28:01
Update now! Microsoft fixes two zero-day bugs
2023-03-15 01:00:00
trellix
trellix
CVE-2023-23397: The Notification Sound You Don’t Want to Hear
2023-03-17 00:00:00
CVE-2023-23397: The Notification Sound You Don’t Want to Hear
2023-03-17 00:00:00
The Bug Report - March 2023 Edition
2023-04-05 00:00:00
avleonov
avleonov
kaspersky
kaspersky
KLA48560 Multiple vulnerabilities in Microsoft Office
2023-03-14 00:00:00
qualysblog
qualysblog
Qualys Survey of Top 10 Exploited Vulnerabilities in 2023
2023-09-26 13:04:00
2023 Threat Landscape Year in Review: If Everything Is Critical, Nothing Is
2023-12-19 15:00:00
The March 2023 Patch Tuesday Security Update Review
2023-03-15 00:08:07
rapid7blog
rapid7blog
Patch Tuesday - September 2023
2023-09-12 22:55:55
Patch Tuesday - March 2023
2023-03-14 23:46:44
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.915 High
EPSS
Percentile
98.9%
Related for NVD:CVE-2023-23397