Privilege Escalation in Microsoft Streaming Service Proxy (CVE‑2023‑36802)
What It Is – A privilege‑escalation flaw in Microsoft’s Streaming Service Proxy allows a low‑privileged attacker to obtain higher system privileges. The vulnerability is tracked as CVE‑2023‑36802 and has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog.
Exploitability – The vulnerability is publicly disclosed; no public exploit code has been released, but its inclusion in the KEV list indicates active exploitation in the wild. The CVSS score is 7.8 (High).
Affected Products – Microsoft Streaming Service Proxy (part of Microsoft 365 media and streaming services).
Why It Matters for Trust & Control Assurance
- Access‑control hygiene – Privilege escalation directly tests the effectiveness of least‑privilege policies and role‑based access controls, a core control objective across most frameworks.
- Audit‑ready evidence – Continuous monitoring of privileged‑account activity and maintaining immutable logs provide defensible proof that access controls are enforced.
- Enterprise buyer expectations – Large customers now demand demonstrable controls (e.g., privileged‑access reviews, segregation of duties) before signing contracts for cloud‑based media services.
Recommended Actions
- Apply Microsoft’s security update for CVE‑2023‑36802 immediately.
- Conduct a rapid privileged‑account review on all systems running the Streaming Service Proxy; remove unnecessary admin rights.
- Enable and centralize detailed audit logging for proxy service activities; integrate logs into a SIEM for real‑time alerts.
- Validate that your least‑privilege policies are documented and can be presented as evidence during compliance audits.
Source: CISA KEV – CVE‑2023‑36802