• CVE-2023-35628

• 高危
  

Microsoft Office Outlook是微软办公软件套装的组件之一，它对Windows自带的Outlook express的功能进行了扩充。

• Windows 10 Version 1607 < 10.0.14393.6529

• Windows Server 2016 < 10.0.14393.6529

• Windows 10 Version 22H2 < 10.0.19045.3803

• Windows 11 Version 22H2 < 10.0.22621.2861

• Windows 11 version 21H2 < 10.0.22000.2652

• Windows Server 2022 < 10.0.20348.2159

• Windows Server 2022 < 10.0.20348.2144

• Windows Server 2012 R2 < 6.3.9600.21715

• Windows Server 2012 R2 < 1.002

• Microsoft Windows 10 < 10.0.10240.20345

• Windows 11 Version 23H2 < 10.0.22631.2861

• Windows 10 Version 21H2 < 10.0.19041.3803

• Windows Server 2022, 23H2 Edition < 10.0.25398.584

• Windows Server 2008 R2 < 6.1.7601.26864

• Windows Server 2008 R2 < 1.001

• Windows Server 2012 < 6.2.9200.24614

• Windows Server 2012 < 1.001

• Windows Server 2019 < 10.0.17763.5206

0x05 修复建议

原文始发于微信公众号（浅安安全）：漏洞预警 | Windows MSHTML远程代码执行漏洞