CVE-2023-36893
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Summary
CVE-2023-36893 is a new vulnerability affecting Microsoft Outlook. This spoofing issue allows an attacker to manipulate email addresses in a way that deceives recipients into believing that the sender is someone trustworthy. If successfully exploited, this vulnerability could lead to sensitive information disclosure or even further compromise of the affected system. Users are advised to keep their Microsoft Outlook applications up-to-date to protect against this threat. Microsoft is currently working on a patch to address this issue. In the meantime, users should exercise caution when handling emails, particularly those containing unexpected or suspicious content.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Office
- Microsoft Office Outlook
- Microsoft 365 Apps
- Microsoft Office 365
Affected Vendors
- Microsoft
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions