CVE-2023-35636

MediumCVSS 6.5/10Last modified Oct 8, 2026

Description

Microsoft Outlook Information Disclosure Vulnerability

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

VendorProductVersions
MicrosoftMicrosoft Office 2019>= 19.0.0, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft 365 Apps for Enterprise>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office LTSC 2021>= 16.0.1, < https://aka.ms/OfficeSecurityReleases
MicrosoftMicrosoft Office 2016>= 16.0.0, < 16.0.5426.1000

References

Timeline

Published
Dec 12, 2023
Last modified
Oct 8, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-356387.5DHCP Server Service Denial of Service VulnerabilityCVE-2023-356398.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2023-35646.1A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown funCVE-2023-356418.8Internet Connection Sharing (ICS) Remote Code Execution VulnerabilityCVE-2023-356426.5Internet Connection Sharing (ICS) Denial of Service VulnerabilityCVE-2023-356437.5DHCP Server Service Information Disclosure VulnerabilityCVE-2023-356447.8Windows Sysmain Service Elevation of Privilege VulnerabilityCVE-2023-356456.4In tbd of tbd, there is a possible memory corruption due to a race condition. This could lead to local escalation of privilege with System eCVE-2023-356469.8In TBD of TBD, there is a possible stack buffer overflow due to a missing bounds check. This could lead to remote code execution with no addCVE-2023-356479.8In ProtocolEmbmsGlobalCellIdAdapter::Init() of protocolembmsadapter.cpp, there is a possible out of bounds read due to a missing bounds checCVE-2023-356489.8In ProtocolMiscLceIndAdapter::GetConfLevel() of protocolmiscadapter.cpp, there is a possible out of bounds read due to a missing bounds checCVE-2023-356497.2In several functions of Exynos modem files, there is a possible out of bounds write due to a missing bounds check. This could lead to remote
CVE-2023-35636: Medium severity, CVSS 6.5 | Vulnix