Security researchers have shared technical details for exploiting a critical Microsoft Outlook vulnerability for Windows (CVE-2023-23397) that allows hackers to remotely steal hashed passwords by simply receiving an email.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-21524

Microsoft is working to address a new known issue affecting apps using ODBC database connections after installing the November 2022 Patch Tuesday Windows updates.

ecurity company GTSC, which discovered the shortcom

https://www.cert.ssi.gouv.fr/avis/CERTFR-2022-AVI-822/