Zero-Click Outlook RCE Exploitation Chain in Windows

Red | Vulnerability Report
Download PDFDownload PDF

Summary:

Two vulnerabilities (CVE-2023-35384 and CVE-2023-36710) in Microsoft Windows can be chained to achieve remote code execution (RCE) on vulnerable Outlook clients. Attackers can exploit these flaws by sending a crafted email with a custom notification sound file to trigger the download of a malicious audio file from a remote server.

Threat Level – Red | Vulnerability Report

Reduce real exposure. Not just vulnerability volume.

Platform

Arbis AI

The HivePro Platform

Integrations

HiveForce Labs

Compare

vs Rapid7

vs Tenable

vs Qualys

vs Nucleus

Solutions

Attack Surface Mgmt

Multi-Env Scanners

Exposure Assessment

Security Intelligence

Threat Prioritization

Exposure Validation

By Role

CISO

Vulnerability Managers

Resources

Platform Resources

Blog

Learning Center

Nation-State Cyber Threats

Threat Advisories

Threat Digests

eBooks

Podcast — Threat Talks

Company

About Us

Our Leadership

Careers

Partner Program

Contact Us

Help Center

Book a Demo
© 2026 HivePro. All rights reserved.Privacy PolicyTerms & Conditions