CVE-2023-23397

CVSS

—

EPSS

0.972 (99.9th percentile)

CISA KEV

Added 2023-03-14, due 2023-04-04

Exploitation

No report

Public exploits

29 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 90Huntress◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards17 Mar 2023, 00:00

  Everything We Know About CVE-2023-23397 | Huntress

  Huntress is tracking CVE-2023-23397, a 0-day that impacts Microsoft Outlook and requires no user interaction to expose user credential hashes.

  ↗huntress.com/blog/everything-we-know-about-cve-…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:37poc publishedpoc-in-github
2. 24 Sept, 11:50kev addedcisa-kev