Spoofing attack in Microsoft products - CVE-2023-33151
Published: July 12, 2023
Vulnerability identifier: #VU78199
CSH Severity: Medium
CVSS v4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2023-33151
CWE-ID: CWE-451
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to incorrect processing of user-supplied data in Microsoft Outlook. A remote attacker can trick a victim to click on a specially crafted URL and spoof page content.
Affected software
Microsoft Office LTSC
Microsoft 365 Apps for Enterprise
Microsoft Outlook
Microsoft Office
Microsoft 365 Apps for Enterprise
Microsoft Outlook
Microsoft Office
How to mitigate CVE-2023-33151
Install updates from vendor's website.