CVE-2023-35311

Product

Microsoft / Outlook

Vulnerability

Microsoft Outlook Security Feature Bypass Vulnerability

Added to KEV

Jul 11, 2023

Remediate by

Aug 1, 2023

Known ransomware use

No

Summary description

Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Notes

https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-35311; https://nvd.nist.gov/vuln/detail/CVE-2023-35311