Outlook Zero-Click Exploits

EXPLOITS AND VULNERABILITIES | NEWS How Outlook notification sounds can lead to zero-click exploits Posted: December 21, 2023 by Pieter Arntz An Akamai researcher has found two vulnerabilities in Windows that can be combined to achieve a full, zero-click remote code execution (RCE) in Outlook. Both vulnerabilities were responsibly disclosed to Microsoft and addressed in the August 2023 and October 2023 patch Tuesdays, so the researcher felt it was no problem to disclose their findings. The first vulnerability, listed as CVE-2023-35384, is a Windows HTML platforms security feature

A screenshot of a Malwarebytes Labs article titled “How Outlook notification sounds can lead to zero-click exploits.” The joke presents ordinary Microsoft software as absurdly dangerous, implying that even an Outlook notification sound can trigger a serious security exploit. It is used as a sarcastic reaction to Microsoft products or software that seem unnecessarily vulnerable or complicated.

• @gentoomemes / 8115 2023-12-23