Threat Advisory: Microsoft Outlook privilege escalation vulnerability being exploited in the wild

Cisco Talos is urging all users to update Microsoft Outlook after the discovery of a critical vulnerability, CVE-2023-23397, in the email client that attackers are actively exploiting in the wild.

Microsoft released a patch for the privilege escalation vulnerability on Tuesday as part of its monthly security update. Along with the patch, Microsoft released a security advisory detailing the targeted, but limited attacks they saw leveraging this particular vulnerability.

Microsoft subsequently assessed that the activity was associated with …

advisory attackers attacks cisco cisco talos client critical critical vulnerability cve cve-2023-23397 discovery email email client escalation exploited exploiting microsoft microsoft outlook outlook patch privilege privilege escalation security security advisory security update talos threat threat advisory tuesday update vulnerability