Firetruck

CVE-2023-35311

KEV

Microsoft Outlook Security Feature Bypass Vulnerability

View CVE record →
Vendor / Project
Microsoft
Product
Outlook
Date added
Jul 11, 2023
Due date
Aug 1, 2023
Known ransomware use
Unknown
CWEs
CWE-367

Description

Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

Notes