CVE-2023-36893

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Aug 8, 2023
Updated: May 29, 2024
CWE ID 20

Summary

CVE-2023-36893 is a new vulnerability affecting Microsoft Outlook. This spoofing issue allows an attacker to manipulate email addresses in a way that deceives recipients into believing that the sender is someone trustworthy. If successfully exploited, this vulnerability could lead to sensitive information disclosure or even further compromise of the affected system. Users are advised to keep their Microsoft Outlook applications up-to-date to protect against this threat. Microsoft is currently working on a patch to address this issue. In the meantime, users should exercise caution when handling emails, particularly those containing unexpected or suspicious content.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Office
  • Microsoft Office Outlook
  • Microsoft 365 Apps
  • Microsoft Office 365

Affected Vendors

  • Microsoft