CVE-2023-36802

Опубликовано: 12 сент. 2023

Источник: msrc

CVSS3: 7.8

EPSS Высокий

Описание

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

What privileges could be gained by an attacker who successfully exploited this vulnerability?

An attacker who successfully exploited this vulnerability could gain SYSTEM privileges.

Продукт	Статья	Обновление
Windows 10 Version 1809 for 32-bit Systems	5030214	Security Update
Windows 10 Version 1809 for x64-based Systems	5030214	Security Update
Windows 10 Version 1809 for ARM64-based Systems	5030214	Security Update
Windows Server 2019	5030214	Security Update
Windows Server 2019 (Server Core installation)	5030214	Security Update
Windows Server 2022	5030216 5030325	Security Update AzureHotpatch
Windows Server 2022 (Server Core installation)	5030216 5030325	Security Update AzureHotpatch
Windows 11 version 21H2 for x64-based Systems	5030217	Security Update
Windows 11 version 21H2 for ARM64-based Systems	5030217	Security Update
Windows 10 Version 21H2 for 32-bit Systems	5030211	Security Update

Показывать по

Publicly Disclosed

Exploited

Yes

Latest Software Release

Exploitation Detected

DOS

N/A

EPSS

Процентиль: 99%

0.72574

Высокий

7.8 High

CVSS3

CVE-2023-36802

CVSS3: 7.8

nvd

почти 2 года назад

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

GHSA-4v34-9x49-p452

CVSS3: 7.8

github

почти 2 года назад

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

BDU:2023-05526

CVSS3: 7.8

fstec

почти 2 года назад

Уязвимость прокси-сервера службы потоковой передачи данных операционных систем Windows, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 99%

0.72574

Высокий

7.8 High

CVSS3