CVE-2023-23397 - Critical Elevation of Privilege zero-day in Microsoft Outlook, severity 9.8

Web: https://www.reddit.com/r/cybersecurity/comments/11sw7z7/cve202323397_critical_elevation_of_privilege/

There is a new critical CVE in Microsoft Outlook:

[https://nvd.nist.gov/vuln/detail/CVE-2023-23397](https://nvd.nist.gov/vuln/detail/CVE-2023-23397)

* Exploited to steal NTLM hashes
* Used to target European organizations
* Leveraged for almost a year by APT28 (Russia)
* Reported by CERT-UA (Ukraine)

This is actively exploited, patch immediately. Microsoft also provided a script that checks Exchange items for malicious messaging items: [https://github.com/microsoft/CSS-Exchange/blob/a4c096e8b6e6eddeba2f42910f165681ed64adf7/docs/Security/CVE-2023-23397.md](https://github.com/microsoft/CSS-Exchange/blob/a4c096e8b6e6eddeba2f42910f165681ed64adf7/docs/Security/CVE-2023-23397.md)

critical cve cve-2023-23397 cybersecurity microsoft microsoft outlook outlook privilege severity zero-day