Microsoft Outlook Security Feature Bypass Vulnerability (CVE-2023-35311)
Severity: high · Patch status: patched · Since 2023-07-11 · CVE-2023-35311
Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt. CISA added CVE-2023-35311 to its Known Exploited Vulnerabilities catalog on Jul 11, 2023, which means attackers are exploiting it in the wild.
What to do
- Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
- US federal agencies must remediate by Aug 1, 2023 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
