Microsoft Outlook Security Feature Bypass Vulnerability

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Jul 11, 2023 · Catalog

   Detected

   Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

2. Jul 11, 2023 · CISA KEV

   Known exploited

   Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

3. Aug 1, 2023 · CISA KEV

   Remediation due

   Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

4. Oct 8, 2026 · Catalog

   Updated

   Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

Affected

• cpe microsoft/365 appsversion unspecified
• cpe microsoft/office 2019version unspecified
• cpe microsoft/office 2021version unspecified
• cpe microsoft/outlook2013
• cpe microsoft/outlook2016
• vendor Microsoft Outlookversion unspecified

Sources

• CISA KEVConfirmed exploitationCVE-2023-35311

  Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

  cisa.gov
• CVE.orgVulnerability recordCVE-2023-35311

  Official CVE identifier

  cve.org
• FIRST EPSSExploitation probabilityCVE-2023-35311

  30-day exploitation probability 15.5%

  first.org
• NIST NVDVulnerability recordCVE-2023-35311

  Microsoft Outlook Security Feature Bypass Vulnerability

  nvd.nist.gov

References

• CISA note · msrc.microsoft.com
• Patch · msrc.microsoft.com
• CISA note · nvd.nist.gov
• US Government Resource · cisa.gov