CVE-2023-36802

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

CVSS

No CVSS.

References

Link	Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802	Patch Vendor Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:microsoft:windows_11_22h2::::::::
	cpe:2.3:o:microsoft:windows_10_22h2::::::::
	cpe:2.3:o:microsoft:windows_11_21h2::::::::
	cpe:2.3:o:microsoft:windows_10_21h2::::::::
	cpe:2.3:o:microsoft:windows_10_1809:::::::arm64:*
	cpe:2.3:o:microsoft:windows_10_1809:::::::x64:*
	cpe:2.3:o:microsoft:windows_10_1809:::::::x86:*
	cpe:2.3:o:microsoft:windows_server_2019::::::::
	cpe:2.3:o:microsoft:windows_server_2022::::::::

History

23 Jan 2025, 18:12

Type	Values Removed	Values Added
CVSS	v2 : ~~unknown~~ v3 : ~~7.8~~	v2 : unknown v3 : unknown
CPE	cpe:2.3:o:microsoft:windows_server_2019:-:::::::* cpe:2.3:o:microsoft:windows_10_1809:::::::: cpe:2.3:o:microsoft:windows_server_2022:-:::::::*	cpe:2.3:o:microsoft:windows_server_2022:::::::: cpe:2.3:o:microsoft:windows_server_2019:::::::: cpe:2.3:o:microsoft:windows_10_1809:::::::arm64:* cpe:2.3:o:microsoft:windows_10_1809:::::::x64:* cpe:2.3:o:microsoft:windows_10_1809:::::::x86:*
References	~~(MISC) https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802 - Patch, Vendor Advisory~~	() https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802 - Patch, Vendor Advisory

14 Aug 2024, 15:29

Type	Values Removed	Values Added
CWE	~~NVD-CWE-noinfo~~	CWE-416

29 May 2024, 03:16

Type	Values Removed	Values Added
New CVE

Information

Published : 2023-09-12 17:15

Updated : 2025-01-23 18:12

NVD link : CVE-2023-36802

Mitre link : CVE-2023-36802

JSON object : View

Products Affected

microsoft

windows_11_21h2
windows_10_21h2
windows_11_22h2
windows_server_2022
windows_10_22h2
windows_10_1809
windows_server_2019

CWE

CWE-416

Use After Free

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802", "name": "Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability", "tags": ["Patch", "Vendor Advisory"], "refsource": ""}, {"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802", "name": "Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability", "tags": ["Patch", "Vendor Advisory"], "refsource": ""}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability"}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-416"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2023-36802", "ASSIGNER": "secure@microsoft.com"}}, "impact": {}, "publishedDate": "2023-09-12T17:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.22621.2275"}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.19045.3448"}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.22000.2416"}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.19044.3448"}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.17763.4851"}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.17763.4851"}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.17763.4851"}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.17763.4851"}, {"cpe23Uri": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "10.0.20348.1970"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2025-01-23T18:12Z"}