Outlook zero-day still vulnerable to attackers with prior access, researchers find

Dominic Chell, director at MDSec, and Will Dormann, senior principal vulnerability analyst at Analygence, said the patch issued to fix CVE-2023-23397 can still be bypassed if an attacker has gained access to a system.