CISA Known Exploited Vulnerability

CVE-2023-29360

Microsoft · Streaming Service

Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

Date added
BOD 22-01 due date
CWE CWE-822
Ransomware Unknown

CISA description

Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.