CVE-2023-23397 Microsoft Office
Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.
- CVSS
- not scored
On CISA’s exploited list
Microsoft Office Outlook Privilege Escalation Vulnerability
- Added
- 2023-03-14
- Federal patch deadline
- 2023-04-04
- Ransomware use
- not known