Critically Close to Zero(Day): Exploiting Microsoft Kernel Streaming Service

Last month Microsoft patched a vulnerability in the Microsoft Kernel Streaming Server, a Windows kernel component used in the virtualization and sharing of camera devices. The vulnerability, CVE-2023-36802, allows a local attacker to escalate privileges to SYSTEM. This blog post details my process of exploring a new attack surface in the Windows kernel, finding a […]

The post Critically Close to Zero(Day): Exploiting Microsoft Kernel Streaming Service appeared first on Security Intelligence.

adversary services application security attack attacker attack surface blog blog post camera cve cve-2023-36802 devices exploiting ibm x-force research kernel local microsoft privileges process server service sharing streaming streaming service system virtualization vulnerability windows windows kernel x-force zero-day