What happened
Microsoft’s November Patch Tuesday includes an Outlook zero-day that is being actively exploited in the wild. A zero-day is a flaw exploited before it was publicly known. The reported issues also include bugs affecting Microsoft Exchange, Microsoft SharePoint, Microsoft Windows Search and LDAP. The supplied information does not state whether the Exchange, SharePoint, Windows Search or LDAP bugs are also being exploited. No CVSS score has been published, and no severity level is stated here. A fix is available. The supplied information does not identify fixed versions or provide further technical details about the flaws or how they are exploited. The issues were reported by Dark Reading.
Who is affected
Organisations running Microsoft Outlook, Microsoft Exchange, Microsoft SharePoint or Microsoft Windows Search may be affected. LDAP bugs are also mentioned in the report, but the affected LDAP product or deployments are not identified. Affected versions and the scope of impact are not available in the supplied information. The active exploitation detail specifically concerns the Outlook zero-day; exploitation of the other reported bugs is not established by the available facts.
Recommended actions
- Apply the available fix to affected Microsoft components. Fixed-version details are not available in the supplied information, so the applicable fix cannot be identified here.
- Monitor affected deployments for signs of exploitation, prioritising attention to Outlook in light of the confirmed active exploitation of its zero-day. Specific indicators or detection details have not been supplied.
