CVE-2023-35636: Microsoft Outlook Information Disclosure Vulnerability
Published Dec 12, 2023
·Updated
Microsoft Outlook Information Disclosure Vulnerability
Affected Software
12 affected componentsFixes available
Microsoft Office 2019 for 32-bit editions
Microsoft Office LTSC 2021 for 64-bit editions
Microsoft Office LTSC 2021 for 32-bit editions
Microsoft Office 2019 for 64-bit editions
Microsoft Office 2016
Microsoft Office 2016
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps for Enterprise
Microsoft 365 Apps
Microsoft Office=2016
Microsoft Office=2019
Microsoft Office Long Term Servicing Channel=2021
Remediation
Event History
Dec 12, 2023
CVE Published
via Microsoft·08:00 AM
Data Sourced
via Microsoft·08:00 AM
DescriptionSeverityWeakness
CVE Published
via MITRE·06:10 PM
Data Sourced
via MITRE·06:10 PM
DescriptionSeverity
Apr 4, 2024
News Published
via BleepingComputer·07:14 PM
News Published
via BleepingComputer·07:16 PM
Frequently Asked Questions
1
What is the severity of CVE-2023-35636?
CVE-2023-35636 is classified as an information disclosure vulnerability affecting Microsoft Outlook.
2
How do I fix CVE-2023-35636?
To fix CVE-2023-35636, you should update your Microsoft Outlook to the latest version provided by Microsoft.
3
Which versions of Microsoft Outlook are affected by CVE-2023-35636?
CVE-2023-35636 affects Microsoft Office 2016, Office 2019, and Office LTSC 2021 across both 32-bit and 64-bit editions.
4
What does CVE-2023-35636 exploit in Microsoft Outlook?
CVE-2023-35636 exploits how Microsoft Outlook handles certain requests, potentially exposing sensitive information.
5
Can CVE-2023-35636 be exploited remotely?
Yes, CVE-2023-35636 can potentially be exploited remotely if users interact with crafted messages.