ctrlINT What the industry said about every indicator, with the quote

CVE-2023-23397Vulnerability

Microsoft Office Outlook Privilege Escalation Vulnerability

Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .

Reported by 5 independent sources · first reported by Huntress · last reported

Last reported 11 days ago

CISA KEVAdded 14 Mar 2023
Fix due 4 Apr 2023
Used by ransomware: not knownCISA KEV catalogue
EPSS97.2%
higher than 99% of CVEsFIRST EPSS, as of 24 Oct 2026

What the reports say

5 reports, newest first · the exact sentence from each

  1. “No-interaction Outlook preview pane vulnerabilities can sometimes feature prominently in state-backed actor campaigns, with CVE-2023-23397 as a prominent example in this category.”

    Rapid7Vendor
    Patch Tuesday - October 2026

  2. “APT28 weaponised the zero-click flaw CVE-2023-23397, patched by Microsoft in March 2023 after a CERT-UA report.”

    Sekoia.ioVendor
    APT28: An Evolution of Tradecraft from X-Agent to LLM Malware

  3. “CVE-2023-23397”

    GreyNoiseVendor
    GreyNoise Detects Active Exploitation of CVEs Mentioned in Black Basta’s Leaked Chat Logs

  4. “Bleak outlook: Mitigating CVE-2023-23397”

    Group-IBVendor
    Bleak outlook: Mitigating CVE-2023-23397

  5. “Everything We Know About CVE-2023-23397”

    HuntressVendor
    Everything We Know About CVE-2023-23397

Indicators reported together

named in the same reports

Also named with it: CVE-2017-11882, CVE-2023-38831, CVE-2023-36884, CVE-2017-5753, CVE-2020-1472, CVE-2022-27925, CVE-2021-26855, CVE-2023-20198, CVE-2024-21762, CVE-2022-41082, CVE-2022-38028, CVE-2024-3400, CVE-2021-44228, CVE-2024-1709, CVE-2024-1708, CVE-2023-4966, CVE-2021-40444, CVE-2021-42278, CVE-2021-42287, CVE-2023-3519

Thanks — we review every report.

Report a wrong value
What is wrong with CVE-2023-23397 here?
No account needed. We do not store your IP address.