Actively exploited in the wild. Patch or mitigate immediately — don't wait for a maintenance window.
An unauthenticated attacker, remotely over the network, if a user is tricked into opening a malicious file or link, can fully compromise the system — steal data, tamper with it and take it offline.
Microsoft Outlook Security Feature Bypass Vulnerability
Inferred from the weakness type (CWE) and how the flaw is reached — the techniques an attacker would chain to exploit this. Real-world corroboration appears here as threat intel is folded in.
Corroborated threat activity referencing this CVE — with source and confidence, not inference.
Named threat actors and observed ATT&CK techniques appear here as intel feeds are folded in — the ATT&CK chain above stays inferred until then.
Generated by Wavense from the CVE record — an immediate mitigation and the permanent fix.
To mitigate risk before patching, organizations should implement stringent email gateway filters to block suspicious attachments and known malicious file types. Educate users about the dangers of unexpected attachments and links, urging them to verify sender identity and report suspicious emails. Consider enabling protected view for all email attachments and configuring Outlook to restrict active content or macros from untrusted sources.
The permanent resolution requires applying the security updates provided by Microsoft for the affected versions of Outlook. Administrators should ensure all Microsoft Outlook installations are updated to the latest patched versions to remediate this vulnerability. Refer to Microsoft's official security advisory for CVE-2023-35311 for specific patch details, affected product versions, and installation guidance.
An attacker can exploit this vulnerability to bypass Outlook's security features, enabling them to circumvent prompts or warnings that would typically appear when opening specially crafted files. This could allow for the execution of arbitrary code or the delivery of malicious content without user explicit consent, leading to potential system compromise, data theft, or ransomware infection. The business consequences include significant data loss, operational disruption, and reputational damage.
Other CVEs affecting 365 apps
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Outlook Elevation of Privilege Vulnerability
Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors, as demonstrated by Exploit-MSExcel.h in targeted zero-day attacks.
Reliance on untrusted inputs in a security decision in Microsoft Office Word allows an unauthorized attacker to bypass a security feature locally.