Zero-day Vulnerability in Outlook

March 15, 2023

Microsoft has patched a zero-day vulnerability in Outlook (CVE-2023-23397) actively exploited by various threat actor groups. The vulnerability (CVE-2023-23397) is a critical Outlook elevation of privilege flaw exploitable with no user interaction in low-complexity attacks. Threat actors can exploit this vulnerability by sending specially crafted messages with extended MAPI properties containing UNC paths to an…
Read more