CVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
KEVCRITICAL 9.8EPSS 97.2%
Microsoft Outlook Elevation of Privilege Vulnerability
- Affected
- Microsoft · Microsoft Office LTSC 2021 · Microsoft Outlook 2016 · Microsoft 365 Apps for Enterprise · Microsoft Office 2019 · Microsoft Outlook 2013 Service Pack 1
- CVSS v3.1 NVD
- 9.8 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS
- 97.16% chance of exploitation in the next 30 days, 100th percentile
- CISA KEV
- added 2023-03-14
- Published
- 2023-03-14
- Updated
- 2025-10-21
Proof-of-concept exploits (32)
- 3yujw7njai/CVE-2023-23397-POC3★ · 2023-03-31
- AiK1d/CVE-2023-23397-POC3★ · 2023-03-31
- BillSkiCO/CVE-2023-23397_EXPLOIT7★ · 2023-03-17
- BronzeBee/cve-2023-2339714★ · 2023-03-22
- CKevens/CVE-2023-23397-POC3★ · 2023-03-31
- Gilospy/CVE-2023-233970★ · 2025-05-25
- Muhammad-Ali007/OutlookNTLM_CVE-2023-2339722★ · 2023-07-15
- P4x1s/CVE-2023-23397-POC3★ · 2023-03-31
- Pushkarup/CVE-2023-233974★ · 2023-10-26
- SecCTechs/CVE-2023-233971★ · 2023-03-20
- Symbolexe/CVE-2023-233970★ · 2024-06-22
- TheUnknownSoul/CVE-2023-23397-PoW1★ · 2024-03-20
- Trackflaw/CVE-2023-23397132★ · 2023-03-24
- ahmedkhlief/CVE-2023-23397-POC6★ · 2023-03-17
- ahmedkhlief/CVE-2023-23397-POC-Using-Interop-Outlook2★ · 2023-03-19
- alicangnll/CVE-2023-233973★ · 2023-03-17
- api0cradle/CVE-2023-23397-POC-Powershell344★ · 2023-03-17
- djackreuter/CVE-2023-23397-PoC9★ · 2023-03-18
- grn-bogo/CVE-2023-233974★ · 2023-03-16
- im007/CVE-2023-233970★ · 2023-03-17
- j0eyv/CVE-2023-233971★ · 2023-03-16
- jacquesquail/CVE-2023-233970★ · 2023-03-29
- ka7ana/CVE-2023-2339740★ · 2023-03-16
- moneertv/CVE-2023-233971★ · 2023-03-18
- securiteinfo/expl_outlook_cve_2023_23397_securiteinfo.yar1★ · 2023-03-23
- sqrtZeroKnowledge/CVE-2023-23397_EXPLOIT_0DAY158★ · 2023-03-15
- tiepologian/CVE-2023-2339725★ · 2023-03-21
- vlad-a-man/CVE-2023-233978★ · 2023-05-07
- praneethnaidu1910-cmd/cve-2023-23397-purple-team0★ · 2026-08-26
- Phaedrik/CVE-2023-23397-POC1★ · 2026-01-09
- cleverg0d/CVEs2★ · 2025-09-25
- medyassineakhmari/CVE_2023_233970★ · 2026-01-31
Exploit collections (1)
- CVE-2023-23397helloexp/0day