Microsoft Outlook vulnerability could be 2023's 'It' bug

[Kent Sharkey]

Dark Reading[^]:

Snowballing PoC exploits for CVE-2023-23397 and a massive attack surface means that almost any business user could be a victim.

The outlook is patchy

"A target doesn’t actually have to open the email to fall victim to an attack." <-- eeep! But fortunately, there's already a patch (and a workaround if you can't patch)

[Nelek]

If I read it correctly, only the server side of exchange is affected although the "fvcked up" is the user... if you dont use exchange, you should not worry... or have I read it understood it wrong?

M.D.V. ;) If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about? Help me to understand what I'm saying, and I'll explain it better to you Rating helpful answers is nice, but saying thanks can be even nicer.

[Kent Sharkey]

No, I think you have it right - it was only the Exchange/Outlook combo. Just Outlook, or OWA are fine. I think.

TTFN - Kent