QID 110428
Date Published: 2023-03-15
QID 110428: Microsoft Outlook Elevation of Privilege Vulnerability for March 2023
Microsoft has released March 2023 security updates for outlook to fix a Elevation of Privilege Vulnerability.
This security update contains the following KBs:
KB5002254
KB5002265
QID Detection Logic:
This authenticated QID checks the file versions from the Microsoft advisory with the versions on affected outlook applications.
Note: Office click-2-run and Office 365 installations need to be updated manually or need to be set to automatic update. There is no direct download for the patch.
Successful exploitation will lead to Elevation of Privileges.
Solution
Refer to Microsoft Security Guide, KB5002254, KB5002265 for more details pertaining to this vulnerability.
Vendor References
- KB5002254 -
support.microsoft.com/en-us/topic/description-of-the-security-update-for-outlook-2016-march-14-2023-kb5002254-a2a882e6-adad-477a-b414-b0d96c4d2ce3 - KB5002265 -
support.microsoft.com/en-us/topic/description-of-the-security-update-for-outlook-2013-march-14-2023-kb5002265-a9d93b9d-21d1-4c5c-a9c0-0f911dde6659
CVEs related to QID 110428
Software Advisories
| Advisory ID | Software | Component | Link |
|---|---|---|---|
| Microsoft Outlook Security Update March 2023 |
msrc.microsoft.com/update-guide/en-us |