Back to the CVE list
CVE-2023-23397 CISA KEV · Actively exploited

Microsoft Office Outlook Privilege Escalation Vulnerability

CVSS score

—

EPSS probability

%97.2

Risk score

—

Published

3 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

Detection and mitigation research lab for CVE-2023-23397 using network and endpoint security telemetry.

Public PoCSource updated: 11.09.2026 07:16:27

praneethnaidu1910-cmd/cve-2023-23397-purple-team

Public PoCSource updated: 26.08.2026 22:47:50

Two POCs I created for the CVE-2023-23397 Outlook NTLM vulnerability, to be used internally.

Public PoCSource updated: 09.01.2026 08:09:22

Demonstration of CVE-2023-23397 Outlook Privellege Escalation vulnerability

Public PoCSource updated: 25.05.2025 05:43:45

CVE-2023-23397: Remote Code Execution Vulnerability in Microsoft Outlook

Public PoCSource updated: 22.06.2024 14:27:16

Proof of Work of CVE-2023-23397 for vulnerable Microsoft Outlook client application.

Public PoCSource updated: 01.06.2025 10:18:29

ducnorth2712/CVE-2023-23397

Public PoCSource updated: 28.12.2023 02:20:58

This script exploits CVE-2023-23397, a Zero-Day vulnerability in Microsoft Outlook, allowing the generation of malicious emails for testing and educational purposes.

Public PoCSource updated: 08.05.2025 18:53:29

Muhammad-Ali007/OutlookNTLM_CVE-2023-23397

Public PoCSource updated: 27.05.2025 06:03:31

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-23397"