CVE-2023-36802: Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

CVE-2023-36802 · Severity: critical · CVSS 7.8 · Exploited in the wild · Published 2023-09-12

Technologies: Microsoft Windows Server 2019, Microsoft Windows Server 2022, Microsoft Windows 11, Microsoft Windows 10. Vendors: Microsoft.

Executive brief

Microsoft Streaming Service Proxy contains a use-after-free vulnerability (CWE-416) that allows for local privilege escalation. An attacker who successfully exploits this vulnerability could gain SYSTEM privileges.

Affected products

Microsoft Windows 10 1809, 21H2, 22H2
Microsoft Windows 11 21H2, 22H2
Microsoft Windows Server 2019 All versions
Microsoft Windows Server 2022 All versions

Timeline

2023-09-12: disclosed
2023-09-12: patched
2023-09-12: kev added: Added to CISA Known Exploited Vulnerabilities Catalog
2023-09-12: exploited: Reported as exploited in the wild at time of publication.