Lucene search
+L

3819 matches found

MSRC
MSRC
added 2023/03/14 1:00 p.m.119 views

Microsoft Mitigates Outlook Elevation of Privilege Vulnerability

May 9, 2023 update: Releases for Microsoft Products has been updated with the release of CVE-2023-29324 - Security Update Guide - Microsoft - Windows MSHTML Platform Security Feature Bypass Vulnerability March 24, 2023 update: Impact Assessment has been updated to a link to Guidance for...

7.5CVSS8AI score0.97408EPSS
SaveExploits19
Circl
Circl
added 2023/03/14 12:00 p.m.14 views

CVE-2023-29324

creationtimestamp| type| source ---|---|--- 2023-03-14 12:00:00+00:00| seen| https://msrc.microsoft.com/blog/2023/03/microsoft-mitigates-outlook-elevation-of-privilege-vulnerability/ 2023-05-09 22:45:04+00:00| seen| https://t.me/cibsecurity/63684 2023-05-10 04:00:00+00:00| seen|...

6.5CVSS7AI score0.02866EPSS
SaveExploits0References13
MSRC
MSRC
added 2023/03/14 7:00 a.m.77 views

マイクロソフトは Outlook の 特権昇格の脆弱性を緩和します

本ブログは、Microsoft Mitigates Outlook Elevation of Privilege Vulnerability の抄訳版です。最新の情報は原文を参照してください。 2023 年 5 月...

7.1AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2023/03/14 7:00 a.m.778 views

Description of the security update for Outlook 2016: March 14, 2023 (KB5002254)

None None...

9.8CVSS7.1AI score0.97408EPSS
SaveExploits19
Microsoft KB
Microsoft KB
added 2023/03/14 7:00 a.m.150 views

Description of the security update for Outlook 2013: March 14, 2023 (KB5002265)

Description of the security update for Outlook 2013: March 14, 2023 KB5002265 Summary This security update resolves a Microsoft Outlook elevation of privilege vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2023-23397. Note: To apply th...

9.8CVSS7.2AI score0.97408EPSS
SaveExploits19
Microsoft CVE
Microsoft CVE
added 2023/03/14 7:00 a.m.180 views

Microsoft Outlook Elevation of Privilege Vulnerability

...

9.8CVSS9.2AI score0.97408EPSS
SaveExploits19
CNNVD
CNNVD
added 2023/03/14 12:00 a.m.12 views

Microsoft Outlook 安全漏洞

Microsoft Outlook is a suite of e-mail applications from Microsoft Corporation USA. A security vulnerability exists in Microsoft Outlook. The following products and editions are affected:Microsoft Office LTSC 2021 for 32-bit editions,Microsoft Outlook 2016 32-bit edition,Microsoft Office LTSC 202...

9.8CVSS7.9AI score0.97408EPSS
SaveExploits19References3
ATTACKERKB
ATTACKERKB
added 2023/03/14 12:00 a.m.148 views

CVE-2023-23397

Microsoft Outlook Elevation of Privilege Vulnerability Recent assessments: cbeek-r7 at March 15, 2023 8:17am UTC reported: Microsoft reported having been notified by Cert-UA of a zero-day vulnerability in Outlook. This vulnerability was observed to be used by nation-state actors targeting Ukraine...

9.8CVSS9.8AI score0.97408EPSS
SaveIn wildExploits19References19
VulnCheck KEV
VulnCheck KEV
added 2023/03/14 12:00 a.m.6 views

VulnCheck KEV: CVE-2023-23397

Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user...

9.8CVSS7.1AI score0.97408EPSS
SaveExploits19References1
Kaspersky
Kaspersky
added 2023/03/14 12:00 a.m.186 views

KLA48560 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to spoof user interface, obtain sensitive information, gain privileges, execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A spoofing...

9.8CVSS10AI score0.97408EPSS
SaveExploits25References31
Positive Technologies
Positive Technologies
added 2023/03/14 12:00 a.m.9 views

PT-2023-1662

Name of the Vulnerable Software and Affected Versions Microsoft Outlook affected versions not specified Description An elevation of privilege issue exists where a remote attacker can gain higher privileges by sending a specially crafted email. The flaw does not require user interaction, such as...

9.8CVSS7.4AI score0.97408EPSS
SaveExploits19References275
CISA KEV Catalog
CISA KEV Catalog
added 2023/03/14 12:00 a.m.89 views

Microsoft Office Outlook Privilege Escalation Vulnerability

Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user...

9.8CVSS8.9AI score0.97408EPSS
SaveIn wildExploits19
Tenable Nessus
Tenable Nessus
added 2023/03/14 12:00 a.m.430 views

Security Updates for Outlook (March 2023)

The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by an elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description...

9.8CVSS8.1AI score0.97408EPSS
SaveExploits19References3
HackRead
HackRead
added 2023/02/25 3:33 p.m.25 views

How to use Email Domain Name with Outlook, Gmail & Co. with Custom Email Hosting

By Owais Sultan How to use your favourite Email Domain Name with Outlook, Gmail & Co. with Custom Email Hosting This is a post from HackRead.com Read the original post: How to use Email Domain Name with Outlook, Gmail & Co. with Custom Email Hosting...

0.8AI score
SaveExploits0
Citrix
Citrix
added 2023/02/20 12:00 a.m.12 views

Customized Outlook OST path gets reset by UPM during logon

Customized Outlook OST path gets reset by Citrix Profile Management during logon...

7.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.4 views

SUSE CVE-2006-0002

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...

7.5CVSS7.7AI score0.45584EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 4:26 a.m.7 views

SUSE CVE-2018-12381

Manually dragging and dropping an Outlook email message into the browser will trigger a page navigation when the message's mail columns are incorrectly interpreted as a URL. Note: this issue only affects Windows operating systems with Outlook installed. Other operating systems are not affected...

5.3CVSS8.2AI score0.01842EPSS
SaveExploits0References7
OpenVAS
OpenVAS
added 2023/02/15 12:00 a.m.32 views

Microsoft Office Outlook 2019 RCE Vulnerability (Feb 2023) - Mac OS X

This host is missing an important security update for Microsoft Office Outlook 2019 on Mac OS X according to Microsoft security update February 2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

9.8CVSS9.5AI score0.82302EPSS
SaveExploits11References1
BDU FSTEC
BDU FSTEC
added 2023/01/30 12:00 a.m.16 views

The vulnerability of the Pocket Outlook Sync (PocketPC) component of the Oracle Sales for Handhelds module in the Oracle E-Business Suite allows a perpetrator to access, modify, add, or delete protected data.

The vulnerability of the Pocket Outlook Sync PocketPC component of the Oracle Sales for Handhelds component in the Oracle E-Business Suite automation system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker operating remotely to modify, add, ...

7.8CVSS7.3AI score0.00517EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2023/01/18 12:15 a.m.9 views

CVE-2023-21855

Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite component: Pocket Outlook SyncPocketPC. Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

7.5CVSS7.2AI score0.00517EPSS
SaveExploits0References1
Rows per page
Query Builder