CVE-2023-35311

CVE-2023-35311 is a high-severity security feature bypass vulnerability affecting Microsoft Outlook, Microsoft 365 Apps, and Microsoft Office products. With a CVSS score of 8.8, it allows an unauthenticated attacker to achieve high impact on confidentiality, integrity, and availability with low attack complexity, though user interaction is required. This vulnerability is actively exploited in the wild, as confirmed by its presence in the KEV catalog. Despite active exploitation, no public exploit intelligence (Metasploit, Nuclei, ExploitDB) is currently available, though it has garnered significant community discussion and media coverage.