CVE-2023-23397

Name of the Vulnerable Software and Affected Versions Microsoft Outlook (affected versions not specified)

Description An elevation of privilege issue exists where a remote attacker can gain higher privileges by sending a specially crafted email. The flaw does not require user interaction, such as opening the email or enabling macros, as the payload is executed automatically when the Outlook client retrieves and processes the message. Technically, the attack triggers Outlook to automatically retrieve a remote resource, forcing Windows to authenticate with an attacker-controlled server via NTLM (New Technology LAN Manager), a suite of Microsoft security protocols. This process leaks the NTLM hash, which can then be relayed to authenticate as the victim.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.