PT-2023-3213 · Microsoft · Windows+2

Masthoon + 1 · Published 2023-06-13 · Updated 2025-08-05 · CVE-2023-29360

Positive Technologies · (AI Summary)

CVSS v3.1

8.4

High

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Streaming Service versions prior to the fixed version

Description The issue allows attackers to gain System privileges on a vulnerable machine. It is an elevation-of-privilege vulnerability that affects the system. The vulnerability is related to an untrusted pointer dereference in the mskssrv.sys driver. It has been actively exploited and was demonstrated at the Pwn2Own contest. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added this vulnerability to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.

Recommendations As a temporary workaround, consider disabling the mskssrv.sys driver until a patch is available. Update Windows to the latest version. Use a firewall and configure it to only allow trusted connections. Use a VPN with a reliable reputation. Keep track of cybersecurity news and do not use the same password for different sites. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

LPE

Incorrect Default Permissions

Untrusted Pointer Dereference

Weakness Enumeration

CWE-276

CWE-822

Related Identifiers

BDU:2023-03333

CVE-2023-29360

ZDI-23-885

Affected Products

Streaming Service

Windows

Mskssrv.Sys

References · 67

• 🔥 https://github.com/MzHmO/Exploit-Street/tree/main/2023/CVE-2023-29360 · Exploit
• 🔥 https://github.com/Nero22k/cve-2023-29360 · Exploit
• 🔥 https://github.com/0xDivyanshu-new/CVE-2023-29360 · Exploit
• 🔥❌ https://github.com/exotikcheat/cve-2023-29360 · Exploit, Deleted
• https://bdu.fstec.ru/vul/2023-03333 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29360 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29360 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-29360 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-29360 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-29360 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29360%20;https://nvd.nist.gov/vuln/detail/CVE-2023-29360 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-23-885 · Security Note
• https://t.me/cybersecuritytechnologies/9089 · Telegram Post
• https://twitter.com/intelxida/status/1707069917638340749 · Twitter Post
• https://twitter.com/pacificseclabs/status/1756050314917204391 · Twitter Post