CVE-2023-35311
HIGH KEVMicrosoft 365 Apps - TOCTOU Race Condition
Title source: ruleDescription
Microsoft Outlook Security Feature Bypass Vulnerability
Scores
CVSS v3
8.8
EPSS
0.0047
EPSS Percentile
64.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CISA KEV
2023-07-11
VulnCheck KEV
2023-07-11
InTheWild.io
2023-07-11
ENISA EUVD
EUVD-2023-39314
CWE
CWE-367
Status
published
Products (5)
microsoft/365_apps
microsoft/office
2019
microsoft/office_long_term_servicing_channel
2021
microsoft/outlook
2013 (2 CPE variants)
microsoft/outlook
2016
Published
Jul 11, 2023
KEV Added
Jul 11, 2023
Tracked Since
Feb 18, 2026