Technical Information

An elevation of privilege vulnerability where an attacker could exploit this vulnerability by sending a specially crafted email which triggers automatically when it is retrieved and processed by the Outlook client. This will leak the Net-NTLMv2 hash of the victim to the attacker who can then relay this to another service and authenticate as the victim. Researchers have found sample of email which suggests that this vulnerability is being exploited in the wild.

Further information on this vulnerability is available at : CVE-2023-23397