Every CVESearch/Get API key

CVE-2023-23397

Microsoft Outlook Elevation of Privilege Vulnerability

9.8 CriticalIn KEVPublic exploit

CVE-2023-23397 is a critical vulnerability (CVSS 9.8) in Microsoft Outlook, published March 14, 2023. CISA lists it as known to be exploited, since March 14, 2023. EUVD reports exploitation since March 14, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 97.2%, the 99th percentile. No source names a fixed version.

Severity
9.8 CriticalCVSS 3.1, CVE List
Exploit chance
97.2%EPSS, 99th percentile
Exploitation
ExploitedCISA KEV,
Fixed in
No fix listedNo source names one

Description

Microsoft Outlook Elevation of Privilege Vulnerability

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

97.2%Up 96.7 points since Mar 15, 2023
90%50%10%1%

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubsqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY2023-03-15
PoC in GitHubalicangnll/CVE-2023-233972023-03-16
PoC in GitHubapi0cradle/CVE-2023-23397-POC-Powershell2023-03-16
PoC in GitHubgrn-bogo/CVE-2023-233972023-03-16
PoC in GitHubj0eyv/CVE-2023-233972023-03-16
PoC in GitHubka7ana/CVE-2023-233972023-03-16
PoC in GitHubBillSkiCO/CVE-2023-23397_EXPLOIT2023-03-17
PoC in GitHubahmedkhlief/CVE-2023-23397-POC2023-03-17
PoC in GitHubim007/CVE-2023-233972023-03-17
PoC in GitHubdjackreuter/CVE-2023-23397-PoC2023-03-18
Show 15 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubmoneertv/CVE-2023-233972023-03-18
PoC in GitHubahmedkhlief/CVE-2023-23397-POC-Using-Interop-Outlook2023-03-19
PoC in GitHubSecCTechs/CVE-2023-233972023-03-20
PoC in GitHubTrackflaw/CVE-2023-233972023-03-20
PoC in GitHubtiepologian/CVE-2023-233972023-03-21
PoC in GitHubBronzeBee/cve-2023-233972023-03-22
PoC in GitHubCyb3rMaddy/CVE-2023-23397-Report2023-03-24
PoC in GitHubZeppperoni/CVE-2023-23397-Patch2023-03-24
PoC in GitHubjacquesquail/CVE-2023-233972023-03-29
PoC in GitHubP4x1s/CVE-2023-23397-POC2023-03-31
PoC in GitHubvlad-a-man/CVE-2023-233972023-05-07
PoC in GitHubMuhammad-Ali007/OutlookNTLM_CVE-2023-233972023-07-14
PoC in GitHubPushkarup/CVE-2023-233972023-10-26
PoC in GitHubTheUnknownSoul/CVE-2023-23397-PoW2024-03-20
PoC in GitHubSymbolexe/CVE-2023-233972024-06-22

What each source reports

CVE List Score used9.8

Microsoft Outlook Elevation of Privilege Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

Record
CVE-2023-23397
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2023-274979.8

Microsoft Outlook Elevation of Privilege Vulnerability

Record
EUVD-2023-27497
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C
Updated
2026-11-02
GitHub AdvisoriesGHSA-4778-q233-jmh59.8

Microsoft Outlook Elevation of Privilege Vulnerability

Microsoft Outlook Elevation of Privilege Vulnerability

Record
GHSA-4778-q233-jmh5
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20, CWE-294
Updated
2026-11-02
CISA KEVNo score

Microsoft Office Outlook Privilege Escalation Vulnerability

Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.

Record
CVE-2023-23397
Weakness
CWE-294
Updated
2026-11-02
NVD9.8

Microsoft Outlook Elevation of Privilege Vulnerability

Record
CVE-2023-23397
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20, CWE-294
Updated
2026-11-02

History

History
RecordedChangedSources
exploitation
exploits, exploits_more
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

This page doesn't list everything

The full exploit list has 4 more links.

PagesAll vulnerabilitiesBrowseDocsSourcesGuideGet API key
MoveEnter Open