CVE-2023-23397: Microsoft Outlook Zero-Day Exploited by APT28

Summary A now fixed zero-day elevation of privilege (EoP) vulnerability in Microsoft Outlook (CVE-2023-23397) allows attackers to send craft emails to exploit Outlook. The vulnerability does not require user interaction to be exploited and runs even before the email is visualized in the preview pane of Outlook, which makes this vulnerability even more dangerous. CVE-2023-2339 […]

The post CVE-2023-23397: Microsoft Outlook Zero-Day Exploited by APT28 appeared first on Netskope.

apt28 attackers cve cve-2023-23397 email emails eop exploit exploited microsoft microsoft outlook netskope outlook preview preview pane privilege send threat labs vulnerability zero-day