How they exploit the security of your email without the need of the user's Click. Silent attack.
Vulnerability CVE-2023-35628 is a critical remote code execution (RCE) flaw affecting the Windows MSHTML platform. This vulnerability can be exploited by an attacker to execute arbitrary code on the victim’s system, even without user interaction.
How the vulnerability works
The vulnerability is in the HTML content rendering component of MSHTML. When Outlook retrieves and processes a specially crafted malicious email, the vulnerability can be exploited to execute arbitrary code. This code will execute with Outlook privileges, giving the attacker significant control over the victim’s system.
Impact of vulnerability
This vulnerability is of particular concern because it can allow a remote, unauthenticated attacker to execute arbitrary code on the victim’s system and can be exploited without user interaction. This means that users can be infected with malware even if they are aware of the risks of malicious emails. This could allow the attacker to take control of the system, steal sensitive data, install malware or perform other harmful actions.
The vulnerability affects a variety of Microsoft products, including Office 365 and on-premises versions. This means that a large number of Windows users are potentially at risk.
How to mitigate vulnerability
Microsoft made available a security update dated December 12, 2023, to address this vulnerability. All Windows users are strongly encouraged to install these patches as soon as possible. It is crucial that Windows users, particularly those using Microsoft Outlook, ensure that their systems are up to date with the latest security patches provided by Microsoft.
Patches are available for the following versions of Windows:
Vulnerability CVE-2023-35628 is a critical threat to Windows users. It is important that all Windows users install the above security updates from Microsoft as soon as possible to protect themselves from this vulnerability.