CVE-2023-35311: Microsoft Outlook Security Feature Bypass Vulnerability
Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.
Other sources
Microsoft Outlook Security Feature Bypass Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 16.0.5404.1000Patch KB5002427 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 15.0.5571.1000Patch KB5002432 - Compensating control
Apply the vendor-recommended Outlook updates to address the “Microsoft Outlook Security Feature Bypass Vulnerability” that bypasses the Microsoft Outlook Security Notice prompt; if updates are unavailable, discontinue use of Microsoft Outlook.
Event History
Frequently Asked Questions
What is CVE-2023-35311?
CVE-2023-35311 is a security feature bypass vulnerability in Microsoft Outlook.
What is the severity of CVE-2023-35311?
The severity of CVE-2023-35311 is high, with a CVSS score of 8.8.
How does CVE-2023-35311 affect Microsoft Outlook?
CVE-2023-35311 allows an attacker to bypass the Microsoft Outlook Security Notice prompt.
Which versions of Microsoft Outlook are affected by CVE-2023-35311?
CVE-2023-35311 affects Microsoft Outlook 2013, 2016, and the corresponding 32-bit and 64-bit editions.
How can I fix CVE-2023-35311?
To fix CVE-2023-35311, update Microsoft Outlook to the latest version and apply the recommended security updates.