CVE-2023-29360

Producto

Microsoft / Streaming Service

Vulnerabilidad

Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

Añadido a KEV

29 feb 2024

Remediar antes de

21 mar 2024

Uso conocido en ransomware

No

Descripción resumida

Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29360 ;https://nvd.nist.gov/vuln/detail/CVE-2023-29360