Outlook security bypass (CVE-2023-35311) exploited in real attacks

high severity · exploited in the wild · published 2023-07-11

An attacker can get Outlook to skip one of its built-in security checks, stripping away a protection that normally guards against malicious messages. This flaw is being actively exploited, so unpatched machines are at risk right now.

CVE: CVE-2023-35311

Source: Microsoft (MSRC)

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1505 and your operating system.