CVE-2023-33131

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Microsoft Outlook Remote Code Execution Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-94

Affected software

VendorProductVersions
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Outlook 2016>= 16.0.0.0, < 16.0.5400.1000
MicrosoftMicrosoft Outlook 2013>= 14.0.0, < 15.0.5563.1000
MicrosoftMicrosoft Outlook 2013 Service Pack 1>= 15.0.0.0, < 15.0.5563.1000

References

Timeline

Published
Jun 14, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-331326.3Microsoft SharePoint Server Spoofing VulnerabilityCVE-2023-331337.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2023-331348.8Microsoft SharePoint Server Remote Code Execution VulnerabilityCVE-2023-331357.3.NET and Visual Studio Elevation of Privilege VulnerabilityCVE-2023-331368.8Azure DevOps Server Remote Code Execution VulnerabilityCVE-2023-331377.8Microsoft Excel Remote Code Execution VulnerabilityCVE-2023-331395.5Visual Studio Information Disclosure VulnerabilityCVE-2023-33148.8A vulnerability arises out of a failure to comprehensively sanitize the processing of a zip file(s). Incomplete neutralization of external cCVE-2023-331406.5Microsoft OneNote Spoofing VulnerabilityCVE-2023-331417.5Yet Another Reverse Proxy (YARP) Denial of Service VulnerabilityCVE-2023-331426.5Microsoft SharePoint Server Elevation of Privilege VulnerabilityCVE-2023-331437.5Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-33131: High severity, CVSS 8.8 | Vulnix