Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Oct 3, 2023

CVE-2023-36802

High
EPSS 75.4%CISA KEV
Microsoft/Streaming Service Proxy

Description

Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.

EPSS — Exploit Probability

75.4%

Higher than 98.9% of all CVEs

Required Action

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802; https://nvd.nist.gov/vuln/detail/CVE-2023-36802

Risk Assessment

HIGH
In CISA KEV
High EPSS

Details

Severity
High
EPSS
75.4%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Sep 12, 2023

Added to KEV

Sep 12, 2023

Remediation Due

Oct 3, 2023

Affected Product

Microsoft

Streaming Service Proxy

View all Microsoft CVEs