{"id":"CVE-2023-23397","aliases":["EUVD-2023-27497","GHSA-4778-q233-jmh5"],"status":"published","title":"Microsoft Outlook Elevation of Privilege Vulnerability","description":"Microsoft Outlook Elevation of Privilege Vulnerability","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.97159,"percentile":0.99894,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":false},"cwes":["CWE-20","CWE-294"],"published":"2023-03-14T16:55:28Z","modified":"2026-06-17T05:37:01Z","kev":{"date_added":"2023-03-14","due_date":"2023-04-04","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2023-03-14"},{"source":"kev","since":"2023-03-14"}],"exploits":[{"source":"pocgithub","id":"sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY","title":"sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY","date":"2023-03-15","url":"https://github.com/sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY"},{"source":"pocgithub","id":"alicangnll/CVE-2023-23397","title":"alicangnll/CVE-2023-23397","date":"2023-03-16","url":"https://github.com/alicangnll/CVE-2023-23397"},{"source":"pocgithub","id":"api0cradle/CVE-2023-23397-POC-Powershell","title":"api0cradle/CVE-2023-23397-POC-Powershell","date":"2023-03-16","url":"https://github.com/api0cradle/CVE-2023-23397-POC-Powershell"},{"source":"pocgithub","id":"grn-bogo/CVE-2023-23397","title":"grn-bogo/CVE-2023-23397","date":"2023-03-16","url":"https://github.com/grn-bogo/CVE-2023-23397"},{"source":"pocgithub","id":"j0eyv/CVE-2023-23397","title":"j0eyv/CVE-2023-23397","date":"2023-03-16","url":"https://github.com/j0eyv/CVE-2023-23397"},{"source":"pocgithub","id":"ka7ana/CVE-2023-23397","title":"ka7ana/CVE-2023-23397","date":"2023-03-16","url":"https://github.com/ka7ana/CVE-2023-23397"},{"source":"pocgithub","id":"BillSkiCO/CVE-2023-23397_EXPLOIT","title":"BillSkiCO/CVE-2023-23397_EXPLOIT","date":"2023-03-17","url":"https://github.com/BillSkiCO/CVE-2023-23397_EXPLOIT"},{"source":"pocgithub","id":"ahmedkhlief/CVE-2023-23397-POC","title":"ahmedkhlief/CVE-2023-23397-POC","date":"2023-03-17","url":"https://github.com/ahmedkhlief/CVE-2023-23397-POC"},{"source":"pocgithub","id":"im007/CVE-2023-23397","title":"im007/CVE-2023-23397","date":"2023-03-17","url":"https://github.com/im007/CVE-2023-23397"},{"source":"pocgithub","id":"djackreuter/CVE-2023-23397-PoC","title":"djackreuter/CVE-2023-23397-PoC","date":"2023-03-18","url":"https://github.com/djackreuter/CVE-2023-23397-PoC"},{"source":"pocgithub","id":"moneertv/CVE-2023-23397","title":"moneertv/CVE-2023-23397","date":"2023-03-18","url":"https://github.com/moneertv/CVE-2023-23397"},{"source":"pocgithub","id":"ahmedkhlief/CVE-2023-23397-POC-Using-Interop-Outlook","title":"ahmedkhlief/CVE-2023-23397-POC-Using-Interop-Outlook","date":"2023-03-19","url":"https://github.com/ahmedkhlief/CVE-2023-23397-POC-Using-Interop-Outlook"},{"source":"pocgithub","id":"SecCTechs/CVE-2023-23397","title":"SecCTechs/CVE-2023-23397","date":"2023-03-20","url":"https://github.com/SecCTechs/CVE-2023-23397"},{"source":"pocgithub","id":"Trackflaw/CVE-2023-23397","title":"Trackflaw/CVE-2023-23397","date":"2023-03-20","url":"https://github.com/Trackflaw/CVE-2023-23397"},{"source":"pocgithub","id":"tiepologian/CVE-2023-23397","title":"tiepologian/CVE-2023-23397","date":"2023-03-21","url":"https://github.com/tiepologian/CVE-2023-23397"},{"source":"pocgithub","id":"BronzeBee/cve-2023-23397","title":"BronzeBee/cve-2023-23397","date":"2023-03-22","url":"https://github.com/BronzeBee/cve-2023-23397"},{"source":"pocgithub","id":"Cyb3rMaddy/CVE-2023-23397-Report","title":"Cyb3rMaddy/CVE-2023-23397-Report","date":"2023-03-24","url":"https://github.com/Cyb3rMaddy/CVE-2023-23397-Report"},{"source":"pocgithub","id":"Zeppperoni/CVE-2023-23397-Patch","title":"Zeppperoni/CVE-2023-23397-Patch","date":"2023-03-24","url":"https://github.com/Zeppperoni/CVE-2023-23397-Patch"},{"source":"pocgithub","id":"jacquesquail/CVE-2023-23397","title":"jacquesquail/CVE-2023-23397","date":"2023-03-29","url":"https://github.com/jacquesquail/CVE-2023-23397"},{"source":"pocgithub","id":"P4x1s/CVE-2023-23397-POC","title":"P4x1s/CVE-2023-23397-POC","date":"2023-03-31","url":"https://github.com/P4x1s/CVE-2023-23397-POC"},{"source":"pocgithub","id":"vlad-a-man/CVE-2023-23397","title":"vlad-a-man/CVE-2023-23397","date":"2023-05-07","url":"https://github.com/vlad-a-man/CVE-2023-23397"},{"source":"pocgithub","id":"Muhammad-Ali007/OutlookNTLM_CVE-2023-23397","title":"Muhammad-Ali007/OutlookNTLM_CVE-2023-23397","date":"2023-07-14","url":"https://github.com/Muhammad-Ali007/OutlookNTLM_CVE-2023-23397"},{"source":"pocgithub","id":"Pushkarup/CVE-2023-23397","title":"Pushkarup/CVE-2023-23397","date":"2023-10-26","url":"https://github.com/Pushkarup/CVE-2023-23397"},{"source":"pocgithub","id":"TheUnknownSoul/CVE-2023-23397-PoW","title":"TheUnknownSoul/CVE-2023-23397-PoW","date":"2024-03-20","url":"https://github.com/TheUnknownSoul/CVE-2023-23397-PoW"},{"source":"pocgithub","id":"Symbolexe/CVE-2023-23397","title":"Symbolexe/CVE-2023-23397","date":"2024-06-22","url":"https://github.com/Symbolexe/CVE-2023-23397"}],"exploits_more":4,"products":[{"vendor":"microsoft","product":"365_apps"},{"vendor":"microsoft","product":"microsoft 365 apps for enterprise"},{"vendor":"microsoft","product":"microsoft office 2019"},{"vendor":"microsoft","product":"microsoft office ltsc 2021"},{"vendor":"microsoft","product":"microsoft outlook 2013 service pack 1"},{"vendor":"microsoft","product":"microsoft outlook 2016"},{"vendor":"microsoft","product":"office"},{"vendor":"microsoft","product":"office_long_term_servicing_channel"},{"vendor":"microsoft","product":"outlook"}],"references":[{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-23397","tags":["vendor-advisory","x_transferred","Patch","Vendor Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-23397","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23397"},{"url":"https://github.com/advisories/GHSA-4778-q233-jmh5"}],"sources":{"cve":[{"id":"CVE-2023-23397","title":"Microsoft Outlook Elevation of Privilege Vulnerability","description":"Microsoft Outlook Elevation of Privilege Vulnerability","status":"published","published":"2023-03-14T16:55:28.168Z","modified":"2025-10-21T23:15:23.783Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","level":"critical","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:35:21.232549Z"}],"euvd":[{"id":"EUVD-2023-27497","description":"Microsoft Outlook Elevation of Privilege Vulnerability","status":"published","published":"2023-03-14T16:55:28Z","modified":"2025-10-21T23:15:23Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:F/RL:O/RC:C","level":"critical"}],"exploited_since":"2023-03-14","updated_at":"2026-11-02T20:31:26.48918Z"}],"ghsa":[{"id":"GHSA-4778-q233-jmh5","title":"Microsoft Outlook Elevation of Privilege Vulnerability","description":"Microsoft Outlook Elevation of Privilege Vulnerability","status":"published","published":"2023-03-14T18:30:18Z","modified":"2025-10-22T00:33:50Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-20","CWE-294"],"updated_at":"2026-11-02T15:04:08.198655Z"}],"kev":[{"id":"CVE-2023-23397","title":"Microsoft Office Outlook Privilege Escalation Vulnerability","description":"Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.","cwes":["CWE-294"],"kev":{"date_added":"2023-03-14","due_date":"2023-04-04","required_action":"Apply updates per vendor instructions.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:16.234141Z"}],"nvd":[{"id":"CVE-2023-23397","description":"Microsoft Outlook Elevation of Privilege Vulnerability","status":"published","published":"2023-03-14T17:15:13.263Z","modified":"2026-06-17T05:37:01.38Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-20","CWE-294"],"updated_at":"2026-11-02T14:07:49.031498Z"}]}}