CVE-2023-36802 PoC — Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Source

https://github.com/Nero22k/cve-2023-36802

Associated Vulnerability

Title:Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability (CVE-2023-36802)
Description:Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Description

Exploit for CVE-2023-36802 targeting MSKSSRV.SYS driver

Readme

# PoC for CVE-2023-36802
Exploit targeting MSKSSRV.SYS driver. The complete exploit works on vulnerable Windows 11 & 10 systems.

# Note
If you have any cool tricks & tips that will make this exploit better I'm open to any suggestions :)

# Credits
- [Valentina Palmiotti (@chompie1337) from IBM X Force](https://securityintelligence.com/x-force/critically-close-to-zero-day-exploiting-microsoft-kernel-streaming-service/)
- [Google's project zero analysis](https://googleprojectzero.github.io/0days-in-the-wild//0day-RCAs/2023/CVE-2023-36802.html)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!