MSRC-CVE-2022-35742 — Microsoft Outlook Denial of Service Vulnerability

Summary

Impact: Denial of Service. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

How could an attacker exploit this vulnerability?
The attacker could exploit this vulnerability by sending a specially crafted email which triggers automatically when it is retrieved and processed by the email server. This could lead to a denial of service BEFORE the email is viewed in the Preview Pane.

Security updates
https — https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
16.0.4966.1000 — https://support.microsoft.com/kb/5002051
15.0.5475.1001 — https://support.microsoft.com/kb/5001990

Vulnerabilities 1

High 7.5

CVE-2022-35742 EPSS 22%

Microsoft Outlook Denial of Service Vulnerability

Microsoft Outlook Denial of Service Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Jun 1, 2023

Revision history

2022-08-19 #2
Updated FAQ information. This is an informational change only.
2022-08-09 #1
Information published.

References

CVE-2022-35742 Microsoft Outlook Denial of Service Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-35742
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss