NVD disclosure day

Published threat advisories for June 14, 2023

CVE-2023-29360

Microsoft Streaming Service Privilege Escalation Vulnerability.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A flaw in the Microsoft Streaming Service could allow an attacker with local access to elevate privileges. This impacts affected Windows systems, posing a business risk of unauthorized system control.

NVD published: June 14, 2023 • CISA KEV

CVE advisoryKnown Exploit

CVE-2023-29357

Microsoft SharePoint Server Privilege Escalation Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

Microsoft SharePoint Server has an elevation of privilege vulnerability that allows an attacker to gain administrator privileges using spoofed tokens. This could allow unauthorized administrative control over affected systems. Organizations using SharePoint Server face business risk from this vulnerability.

NVD published: June 14, 2023 • CISA KEV