CVE-2022-23280

FAQ

What kind of security feature could be bypassed by successfully exploiting this vulnerability?

The attacker would be able to bypass the protection in Outlook that prevents an image from being shown automatically in an email. Depending on the user's settings, the user would normally need to choose to download images for display. If an attacker successfully exploited this vulnerability it could expose the target's IP information.

How do I get the update for Outlook for Mac?

1. Tap the Settings Icon
2. Tap the iTunes & App Store
3. Turn on AUTOMATIC DOWNLOADS for Apps

Alternatively

1. Tap the App Store Icon
2. Scroll down to find Microsoft Outlook
3. Tap the Update button

If the preview pane is an attack vector, why is the severity for this vulnerability Important and not Critical?

Even though the preview pane is an attack vector, the attacker cannot achieve remote code execution if they successfully exploit the vulnerability, but can only gain information from the victim.

Is the Preview Pane an attack vector for this vulnerability?

Yes, the Preview Pane is an attack vector.