Zscaler Security Advisories

Security Advisory - July 11, 2023

Zscaler protects against 2 new vulnerabilities for Windows

  1. Overview
  2. CVE-2023-33157 – Microsoft SharePoint Remote Code Execution Vulnerability
  3. CVE-2023-35311 – Microsoft Outlook Security Feature Bypass Vulnerability

Zscaler, working with Microsoft through their MAPP program, has proactively deployed protection for the following 2 vulnerabilities included in the July 2023 Microsoft security bulletins. Zscaler will continue to monitor exploits associated with all vulnerabilities in the July release and deploy additional protections, as necessary.

CVE-2023-33157 – Microsoft SharePoint Remote Code Execution Vulnerability

Severity: Critical

Affected Software

  • Microsoft SharePoint Server Subscription Edition
  • Microsoft SharePoint Server 2019
  • Microsoft SharePoint Enterprise Server 2016

CVE-2023-35311 – Microsoft Outlook Security Feature Bypass Vulnerability

Severity: Important

Affected Software

  • Microsoft 365 Apps for Enterprise for 64-bit Systems
  • Microsoft Office LTSC 2021 for 32-bit editions
  • Microsoft 365 Apps for Enterprise for 32-bit Systems
  • Microsoft Outlook 2013 RT Service Pack 1
  • Microsoft Outlook 2013 (64-bit editions)
  • Microsoft Outlook 2013 (32-bit editions)
  • Microsoft Outlook 2016 (64-bit edition)
  • Microsoft Office 2019 for 64-bit editions
  • Microsoft Outlook 2016 (32-bit edition)
  • Microsoft Office 2019 for 32-bit editions
  • Microsoft Office LTSC 2021 for 64-bit editions