Sigma Watch is free and independent. If it saves you time, keep it running. ☕ Buy me a coffee
SigmaWatch
CVE coverage

CVE-2023-23397

CVSS 9.8 Actively exploited (KEV) 6 detections found
View on NVD →
Microsoft Outlook Elevation of Privilege Vulnerability

Detection rules

Source Rule Status Updated
sigma Potential CVE-2023-23397 Exploitation Attempt - SMB test 2026-10-19
splunk Windows Rundll32 WebDAV Request production 2026-05-13
splunk Windows Rundll32 WebDav With Network Connection production 2026-05-13
sigma Suspicious WebDav Client Execution Via Rundll32.EXE test 2023-09-18
sigma Outlook Task/Note Reminder Received test 2023-08-17
sigma CVE-2023-23397 Exploitation Attempt test 2023-03-22