NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

Vulnerability4 · 1 read

CVE-2023-35636

CVSS 3.1: 6.5 medium
EPSS: 18%p97
Published: Dec 12, 2023 · Dec 12, 2023
Modified: Oct 8, 2026

Analyze CVE-2023-35636 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Microsoft Outlook Information Disclosure Vulnerability

Vendors: microsoft

Products: 365 apps, office, office long term servicing channel

Weakness: CWE-200

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (17.7%)

In the news

10 stories

Unpatched Windows Search URI Vulnerability Lets Attackers Steal NTLMv2 Hashes

The Hacker NewsJun 3, 10:18 UTC · Jun 3, 2026VulnerabilityCVE-2026-33829 CVE-2023-356362 · 1 read

60

Week in review: 15 million Trello users’ scraped data on sale, attackers can steal NTLM hashes

Help Net SecurityJan 28, 00:00 UTC · Jan 28, 2024RansomwareExploitedCVE-2023-35636 CVE-2024-0204 CVE-2024-232222

60

Microsoft's Final 2023 Patch Tuesday: 34 Flaws Fixed, Including 4 Critical

The Hacker NewsJan 10, 04:07 UTC · Jan 10, 2024VulnerabilityExploitedCVE-2023-35628 CVE-2023-35630 CVE-2023-35636+93 · 1 read

60

Microsoft Patch Tuesday, December 2023 Edition

Krebs on SecurityDec 15, 00:00 UTC · Dec 15, 2023VulnerabilityExploitedCVE-2023-35628 CVE-2023-35641 CVE-2023-35636+13 · 1 read

60

December 2023 Microsoft Patch Tuesday fixed 4 critical flaws

Security AffairsDec 13, 08:18 UTC · Dec 13, 2023VulnerabilityExploitedCVE-2023-35628 CVE-2023-36019 CVE-2023-356362 · 1 read

60

Microsoft releases lightest Patch Tuesday in three years, no zero

Cisco TalosDec 12, 19:45 UTC · Dec 12, 2023VulnerabilityExploitedCVE-2023-35630 CVE-2023-35641 CVE-2023-35628+23 · 1 read

60

December 2023 Patch Tuesday: 33 fixes to wind the year down

Help Net SecurityDec 12, 00:00 UTC · Dec 12, 2023VulnerabilityExploitedCVE-2023-35628 CVE-2023-35636 CVE-2023-23397+43 · 1 read

60

Attackers can steal NTLM password hashes via calendar invites

Help Net SecurityJan 22, 00:00 UTC · Jan 22, 2024Exploit / PoCCVE-2023-356363 · 1 read

50

Researchers Uncover How Outlook Vulnerability Could Leak Your NTLM Passwords

The Hacker NewsJan 30, 04:31 UTC · Jan 30, 2024VulnerabilityCVE-2023-356363 · 1 read

35

Experts detailed Microsoft Outlook flaw that can leak NTLM v2 hashed passwords

Security AffairsJan 29, 18:26 UTC · Jan 29, 2024VulnerabilityCVE-2023-356366

35