Aug 2023: Microsoft Outlook Spoofing Vulnerability
CVE-2023-36893 Published on August 8, 2023

Microsoft Outlook Spoofing Vulnerability
Microsoft Outlook Spoofing Vulnerability

Vendor Advisory NVD

Vulnerability Analysis

Exploitation:

NONE

Automatable:

Technical Impact:

PARTIAL

Weakness Type

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Products Associated with CVE-2023-36893

Want to know whenever a new CVE is published for Microsoft products? stack.watch will email you.

Microsoft Outlook

Microsoft Office

Microsoft 365 Apps

Microsoft Office Long Term Servicing Channel

Microsoft Office 2019

Microsoft Office 2021

Microsoft Outlook 2016

Microsoft Outlook 2013

Affected Versions

Microsoft 365 Apps for Enterprise:

Version 16.0.1 and below https://aka.ms/OfficeSecurityReleases is affected.

Microsoft Office 2019:

Version 19.0.0 and below https://aka.ms/OfficeSecurityReleases is affected.

Microsoft Office LTSC 2021:

Version 16.0.1 and below https://aka.ms/OfficeSecurityReleases is affected.

Microsoft Outlook 2013 Service Pack 1:

Version 15.0.0.0 and below 15.0.5579.1000 is affected.

Microsoft Outlook 2016:

Version 16.0.0.0 and below 16.0.5408.1000 is affected.

Exploit Probability

EPSS

2.19%

Percentile

82.68%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.