BaselineWatch
Desk

CVE-2023-35636

6.5 medium exploit SSVC exploitation: none Modified

Microsoft Outlook Information Disclosure Vulnerability

Fix

Public exploits 1

Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.

Patch, vendor advisory and mitigation references on NVD 2

Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.

Change history 1

  1. First seenCVSS 6.5 · microsoftNVD modified 2026-10-08 22:17

Affected (CPE criteria) 4

  • cpe:2.3:a:microsoft:365_apps:-:*:*:*:enterprise:*:*:*
  • cpe:2.3:a:microsoft:office:2016:*:-:*:-:*:-:*
  • cpe:2.3:a:microsoft:office:2019:*:*:*:*:-:*:*
  • cpe:2.3:a:microsoft:office_long_term_servicing_channel:2021:*:*:*:*:*:*:*

References 2