Microsoft Office Outlook Privilege Escalation Vulnerability
Microsoft · Office
Date added (CISA)
2023-03-14
Remediation due
2023-04-04
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Microsoft Office Outlook contains a privilege escalation vulnerability that allows for a NTLM Relay attack against another service to authenticate as the user.