Beware: Experts Reveal New Details on Zero-Click Outlook RCE Exploits

Akamai disclosed technical details for two now-patched Windows flaws—CVE-2023-35384 (MSHTML security zone bypass) and CVE-2023-36710 (Audio Compression Manager integer overflow)—which can be chained to achieve zero-click remote code execution in Outlook. The report highlights that these issues enable credential leakage and remote payload download (e.g., malicious sound files), notes active weaponization of a related Outlook bug by APT28, and recommends mitigations including blocking outbound SMB, disabling NTLM, or using the Protected Users security group.