Skip to content
COOEY

EXPOSURES › CVE-2023-36802

CVE-2023-36802

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2023-09-12 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2023-36802 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 72/100 exploited-in-wildunpatched

A Microsoft Streaming Service Proxy vulnerability allows privilege escalation, actively exploited in the wild.

An unspecified vulnerability in Microsoft's Streaming Service Proxy enables privilege escalation, which is currently being exploited. DIB organizations using this proxy should immediately assess their exposure and apply any available mitigations to avoid unauthorized access and potential compliance violations. This highlights the importance of prompt patching and vulnerability management.

Shame score — The active exploitation of a privilege escalation vulnerability in a widely-used Microsoft product demonstrates a significant security oversight and potential for widespread compromise.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

DESCRIPTION

Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.

AFFECTED FEDRAMP PRODUCTS · 4
PRODUCTSTATUS
Azure Commercial Cloud
Microsoft
Authorized
Azure Government (includes Dynamics 365)
Microsoft
Authorized
Microsoft Office 365 GCC High
Microsoft
In Process
Office 365 Multi-Tenant & Supporting Services
Microsoft
Authorized