CVE-2023-23397
Microsoft Office Outlook Privilege Escalation Vulnerability
Published Mar 14, 2023 · updated Jun 16, 2026 · microsoft 365 apps
Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.
Timeline
Detection, updates, and resolution for this record.
Mar 14, 2023 · Catalog
Detected
Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.
Mar 14, 2023 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Apr 4, 2023 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.
Required action
Apply updates per vendor instructions.
CISA due date Apr 4, 2023
Affected
- cpe microsoft/365 appsversion unspecified
- cpe microsoft/office2019
- cpe microsoft/office long term servicing channel2021
- cpe microsoft/outlook2013
- cpe microsoft/outlook2016
- vendor Microsoft Officeversion unspecified
Sources
- CISA KEVCVE-2023-23397
Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.
cisa.gov - CVE.orgCVE-2023-23397
Official CVE identifier
cve.org - FIRST EPSSCVE-2023-23397
30-day exploitation probability 97.2%
first.org - NIST NVDCVE-2023-23397
Microsoft Outlook Elevation of Privilege Vulnerability
nvd.nist.gov