High MSRC-CVE-2023-36763 1 CVE

Microsoft Outlook Information Disclosure Vulnerability

Published Sep 12, 2023 · Updated Sep 12, 2023

Vendor: Microsoft

Summary

Impact: Information Disclosure. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

Is the Preview Pane an attack vector for this vulnerability?
No, the Preview Pane is not an attack vector.

What type of information could be disclosed by this vulnerability?
Exploiting this vulnerability could allow the disclosure of credentials.

Security updates
https — https://docs.microsoft.com/en-us/officeupdates/microsoft365-apps-security-updates
16.0.5413.1000 — https://support.microsoft.com/help/5002499

Vulnerabilities 1

High 7.5

CVE-2023-36763

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Outlook Information Disclosure Vulnerability

Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019

Sep 12, 2023

Revision history

2023-09-12 #1
Information published.

References

CVE-2023-36763 Microsoft Outlook Information Disclosure Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36763
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
Common Vulnerability Scoring System
https://www.first.org/cvss