ZeroDay Findings
Sign inSign up

Findings

CVE-2023-36802

Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

Published Sep 12, 2023 · updated Jun 16, 2026 · microsoft windows 10 1809

Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.

Timeline

Detection, updates, and resolution for this record.

  1. Sep 12, 2023 · Catalog

    Detected

    Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.

  2. Sep 12, 2023 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Oct 3, 2023 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Oct 3, 2023

Affected

  • cpe microsoft/windows 10 1809version unspecified
  • cpe microsoft/windows 10 21h2version unspecified
  • cpe microsoft/windows 10 22h2version unspecified
  • cpe microsoft/windows 11 21h2version unspecified
  • cpe microsoft/windows 11 22h2version unspecified
  • cpe microsoft/windows server 2019version unspecified
  • vendor Microsoft Streaming Service Proxyversion unspecified

Sources

  • CISA KEVCVE-2023-36802

    Microsoft Streaming Service Proxy contains an unspecified vulnerability that allows for privilege escalation.

    cisa.gov
  • CVE.orgCVE-2023-36802

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-36802

    30-day exploitation probability 27.9%

    first.org
  • NIST NVDCVE-2023-36802

    Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

    nvd.nist.gov

References