Researchers Uncover How Outlook Vulnerability Could Leak Your NTLM Passwords

A now-patched security flaw in Microsoft Outlook could be exploited by threat actors to access NT LAN Manager (NTLM) v2 hashed passwords when opening a specially crafted file.
The issue, tracked as CVE-2023-35636 (CVSS score: 6.5), was addressed by the tech giant as part of its Patch Tuesday updates for December 2023.
"In an email attack scenario, an attacker could exploit the

access cve cve-2023-35636 cvss cvss score exploited file flaw giant issue lan leak manager microsoft microsoft outlook ntlm outlook passwords patch patch tuesday patch tuesday updates researchers score security security flaw tech threat threat actors tuesday uncover updates vulnerability