CVE-2023-23397

Microsoft Outlook Elevation of Privilege Vulnerability

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - secure@microsoft.com

Published

2023-03-14

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2023-03-14, action due 2023-04-04: Apply updates per vendor instructions.

Weaknesses

CWE-20, CWE-294

Affected products

• 365 Apps (Microsoft)
• Office (Microsoft)
• Office Long Term Servicing Channel (Microsoft)
• Outlook (Microsoft)

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397