Outlook elevation of privilege flaw exploited in the wild

critical severity · exploited in the wild · published 2023-03-14

A specially crafted email triggers this Outlook elevation of privilege flaw without the victim even opening it, letting an attacker gain elevated privileges. It is already being exploited in the wild.

Fixed in: 15.0.5537.1000, 16.0.5387.1000

CVE: CVE-2023-23397

Source: Microsoft (MSRC)

Am I affected?

You are affected if the installed version is older than the fixed version of its release line: 15.0.5537.1000, 16.0.5387.1000. Check the version you have and update to the fixed version of your line or later. The fixed versions are verified against a vendor or advisory source.

Get the fix

FixLane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the FixLane MCP server and call get_fix_prompt with incident id 1507 and your operating system.