Patch Tuesday 2023-03

[hippy]

https://www.techtarget.com/searchwindowsserver/news/365532560/Microsoft-stops-two-zero-days-for-March-Patch-Tuesday

The second zero-day is a Microsoft Outlook elevation-of-privilege vulnerability (CVE-2023-23397) rated critical with a CVSS rating of 9.8. This flaw affects several Outlook versions, including Microsoft 365 Apps for Enterprise systems, and does not rely on the Outlook preview pane as an attack vector. "The attacker could exploit this vulnerability by sending a specially crafted email which triggers automatically when it is retrieved and processed by the email server," Microsoft wrote in its CVE notes.