CVE-2023-35311 — Microsoft Outlook Security Feature Bypass Vulnerability
CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability
CISA Known Exploited Vulnerability (KEV)
| Vendor / project | Microsoft |
| Product | Outlook |
| Date added | 2023-07-11 |
| Due date | 2023-08-01 |
| Ransomware campaign use | Unknown |
Description
Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.
Required action (CISA)
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
Notes
https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-35311; https://nvd.nist.gov/vuln/detail/CVE-2023-35311
References
- NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-35311
- KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog