CVE-2023-23397 CRITICAL — CVSS 9.8

Outlook NTLM Leak (CVE-2023-23397) Scanner

Free instant check: is your website vulnerable to CVE-2023-23397? Microsoft Outlook flaw disclosed in 2023. Affects millions of systems worldwide. Check now — 60 seconds, no signup.

🔍

✓ No signup · ✓ 60 second results · ✓ Checks CVE-2023-23397 specifically

What is CVE-2023-23397 (Outlook NTLM Leak)?

Zero-click NTLM credential theft via crafted calendar invitations. Exploited by Russian APT28.

Disclosed in 2023, CVE-2023-23397 affects Microsoft Outlook and carries a CVSS score of 9.8 (CRITICAL). Despite patches being available, automated scanning continues to find unpatched systems years after initial disclosure.

9.8
CVSS Score
CRITICAL
Severity
2023
Year Disclosed

How to Check if You're Vulnerable to CVE-2023-23397

  1. Enter your domain in the free scanner above
  2. Click "Check Now" — no signup required
  3. VulnScan scans your Microsoft Outlook installation for CVE-2023-23397 indicators
  4. Results in 60 seconds — free security grade included

Frequently Asked Questions — CVE-2023-23397

What is CVE-2023-23397 (Outlook NTLM Leak)?

Zero-click NTLM credential theft via crafted calendar invitations. Exploited by Russian APT28.

How do I check if my website is vulnerable to CVE-2023-23397?

Enter your domain in VulnScan above. Our scanner checks for CVE-2023-23397 indicators and Microsoft Outlook version fingerprinting. Results in 60 seconds, no signup required.

Is CVE-2023-23397 still actively exploited?

Yes. Automated exploit kits continue targeting unpatched Microsoft Outlook systems worldwide. The CVSS score of 9.8 reflects the severity of exploitation. Patch immediately and verify with an external scan.

Don't wait — check for CVE-2023-23397 now

Free scan in 60 seconds. No signup, no credit card.

Also Check For These Critical Vulnerabilities

CVE-2021-44228 — Log4ShellCVE-2021-45046 — Log4j2 BypassCVE-2023-44487 — HTTP/2 Rapid ResetCVE-2021-26084 — Confluence RCECVE-2022-22965 — Spring4ShellCVE-2022-30190 — Follina MSDTCVE-2021-34527 — PrintNightmareCVE-2020-1472 — Zerologon Full Vulnerability Scanner →