CVE-2022-23280

CVE-2022-23280 is a security feature bypass vulnerability affecting Microsoft Outlook for Mac 2016. This medium-severity vulnerability, with a CVSS score of 5.3, allows an unauthenticated attacker to achieve low-impact confidentiality compromise over a network with low attack complexity. There is no evidence of active exploitation, nor is public exploit code available, as indicated by its absence from KEV, Metasploit, Nuclei, and ExploitDB. Despite this, the vulnerability has garnered some community attention and media coverage, appearing in two articles and two community discussions.