CVE-2023-36802
CVSS 3.1 Score 7.8 of 10 (high)
Details
Summary
CVE-2023-36802 is an elevation of privilege vulnerability affecting Microsoft Streaming Service Proxy. An attacker who successfully exploits this vulnerability can gain higher privileges on the system, potentially compromising the security of the affected environment. The vulnerability arises due to insufficient access controls in the Microsoft Streaming Service Proxy, enabling an attacker to escalate their privileges and execute arbitrary code. Organizations using Microsoft Streaming Service Proxy are advised to apply the available security patch as soon as possible to mitigate the risk of potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.