CVE-2023-36802

HighCVSS 7.8/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Sep 12, 2023
Last modified
Jun 17, 2026
Added to CISA KEV
Sep 12, 2023
NVD status
Analyzed

Related CVEs from 2023

CVE-2023-368035.5Windows Kernel Information Disclosure VulnerabilityCVE-2023-368047.8Windows GDI Elevation of Privilege VulnerabilityCVE-2023-368057.0Windows MSHTML Platform Security Feature Bypass VulnerabilityCVE-2023-368065.4Contao is an open source content management system. Starting in version 4.0.0 and prior to versions 4.9.42, 4.13.28, and 5.1.10, it is possiCVE-2023-368076.5pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an atCVE-2023-368089.8GLPI is a free asset and IT management software package. Starting in version 0.80 and prior to version 10.0.8, Computer Virtual Machine formCVE-2023-368095.4Kiwi TCMS, an open source test management system allows users to upload attachments to test plans, test cases, etc. Versions of Kiwi TCMS prCVE-2023-36816.1A vulnerability classified as problematic was found in Campcodes Retro Cellphone Online Store 1.0. This vulnerability affects unknown code oCVE-2023-368106.5pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. An attacker who uses thCVE-2023-368114.7borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authenticatioCVE-2023-368129.8OpenTSDB is a open source, distributed, scalable Time Series Database (TSDB). OpenTSDB is vulnerable to Remote Code Execution vulnerability CVE-2023-368138.8Kanboard is project management software that focuses on the Kanban methodology. In versions prior to 1.2.31authenticated user is able to per
CVE-2023-36802: High severity, CVSS 7.8 | Vulnix