CVE-2023-35311

HighCVSS 8.8/10Known exploited (CISA KEV)Last modified Oct 8, 2026

Description

Microsoft Outlook Security Feature Bypass Vulnerability

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published
Jul 11, 2023
Last modified
Oct 8, 2026
Added to CISA KEV
Jul 11, 2023
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-353127.8Microsoft VOLSNAP.SYS Elevation of Privilege VulnerabilityCVE-2023-353137.8Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution VulnerabilityCVE-2023-353146.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-353158.8Windows Layer-2 Bridge Network Driver Remote Code Execution VulnerabilityCVE-2023-353166.5Remote Procedure Call Runtime Information Disclosure VulnerabilityCVE-2023-353177.8Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityCVE-2023-353186.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-353196.5Remote Procedure Call Runtime Denial of Service VulnerabilityCVE-2023-35325.4Cross-site Scripting (XSS) - Stored in GitHub repository outline/outline prior to 0.70.1.CVE-2023-353207.8Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityCVE-2023-353216.5Windows Deployment Services Denial of Service VulnerabilityCVE-2023-353228.8Windows Deployment Services Remote Code Execution Vulnerability
CVE-2023-35311: High severity, CVSS 8.8 | Vulnix