CVE-2023-23397 | BDVDB-2026-0044 Detail

MicrosoftMicrosoft Office LTSC 2021

Description#

Microsoft Outlook Elevation of Privilege Vulnerability

Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact high. Attack vector: network.

No public exploit known

9.8 Critical

97.1%, Very High

Estimated chance of exploitation in the next 30 days. EPSS percentile: 99.9.

Yes

Listed in the CISA Known Exploited Vulnerabilities catalog.

Improper Input Validation

Apply updates per vendor instructions.

Vulnerable
>= 16.0.1 and < https://aka.ms/OfficeSecurityReleases
Fixed
https://aka.ms/OfficeSecurityReleases

Not available

9.8 Critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C

Not available

Not available

Source: CVE List v5 (record); CISA KEV (kev, action); FIRST EPSS (epss).