CVE-2023-36802
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
- Published
- Sep 12, 2023
- Updated
- Oct 30, 2025
- Assigning CNA
- microsoft
- Evidence observed
- Sep 12, 2023
Primary CVSS
nvd · CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HModerate · next 30 days
- Percentile
- 98.1%
- Model date
- Oct 15, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
CISA Known Exploited
This CVE appears in the CISA Known Exploited Vulnerabilities catalog.
Summary
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
Sources
Local privilege escalation exploit for CVE-2023-36802 targeting Windows kernel streaming service (MSKSSRV) on Windows 11 22H2, using I/O Ring read/write primitive to elevate arbitrary process to SYSTEM.
Reverse engineering and vulnerability research on CVE-2023-36802, focusing on object type confusion in mksssrv.sys.
PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy
- CVE-2023-36802Exploit
CVE-2023-36802 ITW case
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.