Microsoft Outlook RCE Vulnerability (CVE-2023-33131)
CVE-2023-33131 Published on June 14, 2023

Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability

Vendor Advisory NVD

Weakness Type

What is a Code Injection Vulnerability?

The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

CVE-2023-33131 has been classified to as a Code Injection vulnerability or weakness.


Products Associated with CVE-2023-33131

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

 
 
 
 

Affected Versions

Microsoft Office 2019: Microsoft 365 Apps for Enterprise: Microsoft Office LTSC 2021: Microsoft Outlook 2016: Microsoft Outlook 2013: Microsoft Outlook 2013 Service Pack 1:

Exploit Probability

EPSS
2.75%
Percentile
85.81%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.