July 11, 2023 · Applied Cybernetics Group
CVE-2023-35311 Microsoft Outlook
Microsoft Outlook Security Feature Bypass Vulnerability
- Added to KEV
2023-07-11- Federal due date
2023-08-01- Vendor
- Microsoft
- Product
- Outlook
- EPSS
- 96.8th percentile (score 0.155, as of
2026-11-06) - NVD CVSS v3.1
- 8.8 (HIGH)
- Ransomware use
- Unknown
- Upstream
- https://nvd.nist.gov/vuln/detail/CVE-2023-35311
CISA short description
Microsoft Outlook contains a security feature bypass vulnerability that allows an attacker to bypass the Microsoft Outlook Security Notice prompt.
Required action
Apply updates per vendor instructions or discontinue use of the product if updates are unavailable.
NVD description
Microsoft Outlook Security Feature Bypass Vulnerability