ZeroDay Findings
Sign inSign up

Findings

CVE-2023-35311

Microsoft Outlook Security Feature Bypass Vulnerability

Published Jul 11, 2023 · updated Oct 8, 2026 · microsoft 365 apps

Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

Timeline

Detection, updates, and resolution for this record.

  1. Jul 11, 2023 · Catalog

    Detected

    Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

  2. Jul 11, 2023 · CISA KEV

    Known exploited

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  3. Aug 1, 2023 · CISA KEV

    Remediation due

    Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

  4. Oct 8, 2026 · Catalog

    Updated

    Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

Required action

Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.

CISA due date Aug 1, 2023

Affected

  • cpe microsoft/365 appsversion unspecified
  • cpe microsoft/office 2019version unspecified
  • cpe microsoft/office 2021version unspecified
  • cpe microsoft/outlook2013
  • cpe microsoft/outlook2016
  • vendor Microsoft Outlookversion unspecified

Sources

  • CISA KEVCVE-2023-35311

    Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.

    cisa.gov
  • CVE.orgCVE-2023-35311

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-35311

    30-day exploitation probability 15.5%

    first.org
  • NIST NVDCVE-2023-35311

    Microsoft Outlook Security Feature Bypass Vulnerability

    nvd.nist.gov

References