Description
Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Microsoft 365 Apps for Enterprise | Microsoft / Microsoft 365 Apps for Enterprise | >= 16.0.1, < https://aka.ms/OfficeSecurityReleases | affected |
| Microsoft Office 2019 | Microsoft / Microsoft Office 2019 | >= 19.0.0, < https://aka.ms/OfficeSecurityReleases | affected |
| Microsoft Office LTSC 2021 | Microsoft / Microsoft Office LTSC 2021 | >= 16.0.1, < https://aka.ms/OfficeSecurityReleases | affected |
| Microsoft Outlook 2013 Service Pack 1 | Microsoft / Microsoft Outlook 2013 Service Pack 1 | >= 15.0.0.0, < 15.0.5537.1000 | affected |
| Microsoft Outlook 2016 | Microsoft / Microsoft Outlook 2016 | >= 16.0.0.0, < 16.0.5387.1000 | affected |