PT-2023-4987 · Microsoft · Streaming Service Proxy+1

Guanghui Xia + 3 · Published 2023-09-12 · Updated 2025-10-14 · CVE-2023-36802

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Streaming Service Proxy versions prior to the fixed version

Description The issue is related to an elevation-of-privilege vulnerability in the Microsoft Streaming Service Proxy, which allows attackers to gain system-level rights. This vulnerability is associated with a buffer overflow in memory. The estimated number of potentially affected devices is not specified. There have been reports of real-world incidents where this issue was exploited, including limited exploitation in the wild. Technical details about exploitation include the involvement of the MSKSSRV.SYS driver.

Recommendations For versions prior to the fixed version, apply the patch issued on September 12, 2023, to resolve the issue. As a temporary workaround, consider restricting access to the MSKSSRV.SYS driver until a patch is applied. Avoid using the vulnerable Microsoft Streaming Service Proxy until the issue is resolved.

Exploit

Fix

LPE

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

BDU:2023-05526

CVE-2023-36802

Affected Products

Streaming Service Proxy

Windows

References · 85

• 🔥 https://github.com/MzHmO/Exploit-Street/tree/main/2023/CVE-2023-36802 · Exploit
• 🔥 https://github.com/chompie1337/Windows_MSKSSRV_LPE_CVE-2023-36802 · Exploit
• 🔥 https://github.com/Nero22k/cve-2023-36802 · Exploit
• 🔥 https://github.com/x0rb3l/CVE-2023-36802-MSKSSRV-LPE · Exploit
• 🔥 https://github.com/4zur-0312/CVE-2023-36802 · Exploit
• https://osv.dev/vulnerability/CVE-2023-36802 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-05526 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2023-36802 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36802 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-36802 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-36802 · Security Note
• https://twitter.com/cwresearchlab/status/1716315157910130783 · Twitter Post
• https://twitter.com/pacificseclabs/status/1756050314917204391 · Twitter Post
• https://twitter.com/ColorTokensInc/status/1713057054795993218 · Twitter Post
• https://twitter.com/matthewjetthall/status/1701675006793539945 · Twitter Post