CVE-2023-29360
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
CVSS
—
No CVSS
EPSS
22.1%
p97
KEV
YES
Feb 29, 2024
Exploit Today
79
0-100
Published: — · Last modified: —
Product
Microsoft / Streaming Service
Vulnerability
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
Added to KEV
Feb 29, 2024
Remediate by
Mar 21, 2024
Known ransomware use
No
Summary description
Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Notes
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29360 ;https://nvd.nist.gov/vuln/detail/CVE-2023-29360
No related CVEs by CWE or product.