CVE-2023-36802

CVE-2023-36802 is a significant software vulnerability that was identified in the Microsoft Streaming Service Proxy, specifically within Microsoft Stream's streaming service proxy (formerly known as Office 365 Video). This flaw, characterized as an Elevation of Privilege Vulnerability, allows a local attacker to execute arbitrary code with SYSTEM privileges. The vulnerability, rated with a CVSS score of 7.8, indicates a high level of severity and potential impact on affected systems. The discovery of CVE-2023-36802 marked it as one of two zero-day vulnerabilities found within Microsoft products, the other being located in Microsoft Word (CVE-2023-36761). These vulnerabilities were part of a larger release by Microsoft, which addressed a total of 59 bugs across various software offerings. Notably, CVE-2023-36802 was highlighted for immediate attention due to its potential impact and exploitation risk, earning it a spot at the top of the test-and-deploy list. In response to the identified threat, Microsoft promptly released fixes as part of their update guide. Additionally, Check Point IPS has provided protection against this specific vulnerability. Despite these remediation efforts, organizations are strongly advised to prioritize the deployment of these updates to mitigate the risk associated with CVE-2023-36802, given its potential for privilege escalation and the execution of arbitrary code.