coldbraid

CVE-2023-29360 Microsoft Streaming Service

Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges.

CVSS
not scored

CWE-822

On CISA’s exploited list

Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

Added
2024-02-29
Federal patch deadline
2024-03-21
Ransomware use
not known