CVE-2023-33153

Deeper analysis

CVE-2023-33153 is a remote code execution vulnerability affecting Microsoft Outlook, as indicated by its official description and assignment of CWE-416. The flaw carries a CVSS 3.1 base score of 6.8 with the vector AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:H, reflecting network-accessible attack potential that requires user interaction and high attack complexity.

An unauthenticated remote attacker can leverage the issue to execute arbitrary code on a target system, resulting in high integrity and availability impacts while leaving confidentiality unaffected. Successful exploitation therefore allows an adversary to modify data or disrupt Outlook functionality after the victim interacts with malicious content delivered over the network.

Microsoft’s Security Response Center advisory at the referenced URL supplies official mitigation guidance, including available patches and recommended update actions for affected Outlook installations.

The associated EPSS score rose materially from a low baseline after the July 2023 disclosure, reaching a peak of 0.0673 on 2025-01-22 before receding to the current value of 0.0064; this trajectory indicates that exploitation interest emerged well after public release and warrants renewed attention.