Microsoft fixes Outlook zero-day used by Russian hackers since April 2022

The vulnerability (CVE-2023-23397) was reported by CERT-UA, and it's a critical Outlook elevation of privilege security flaw exploitable without user interaction in low-complexity attacks.