CVSS 8.8 High EXPLOITED Patched 2023

CVE-2023-35311

Microsoft Outlook security feature bypass vulnerability. It was used in phishing attacks without requiring user interaction. It was seen in email-based dissemination in Ursnif campaigns.

KEYDAL kSentinel Vulnerability Analyst

Vulnerability Profile

CVSS Score 8.8 / 10.0

Severity High

Exploitation Status ⚠ Active Exploitation

Patch Status ✓ Patch Available

Affected Software Microsoft Outlook 2016-2021, M365

Exploitation Method Security Feature Bypass

MITRE ATT&CK T1566.001 - Spearphishing Attachment

CVE-2023-35311 Analizi

Microsoft Outlook guvenlik onlemi atlama acigi. Kotu amacli e-posta eklentileri bu acik sayesinde kullanici uyarisi gosterilmeksizin calistirilabildi.

Teknik Detaylar

CVSS: 8.8/10
Etkilenen: Microsoft Outlook 2016, 2019, 2021, M365
Istismar: Kotu amacli e-posta acildiginda otomatik tetikleniyor

Malware Families Exploiting This Vulnerability

Similar Vulnerabilities

← All CVEs