Actively exploited in the wild
Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability
Microsoft - Streaming Service · Listed in the CISA KEV since 2024-02-29. This indicates confirmed attacks in production environments.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CVE-2023-29360
HighCVSS 8.4KEVSummary
Microsoft Streaming Service Elevation of Privilege Vulnerability.
Risk Assessment
An attacker could gain elevated privileges on the system, potentially leading to full system compromise or malware installation.
Recommendation
Apply security updates provided by Microsoft for the Streaming Service.
Other vulnerabilities in Microsoft Streaming Service
See all- CVE-2024-30089High
A vulnerability in Microsoft Streaming Service allows elevation of privilege. The flaw can be exploited by a local attacker to gain higher privileges on the system.
- CVE-2024-30090High
A vulnerability in Microsoft Streaming Service allows elevation of privilege. An attacker could exploit this flaw to gain higher privileges on the system.
Original NVD description (English source)
Microsoft Streaming Service Elevation of Privilege Vulnerability