Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

← Live incidents

Feb 29, 2024

1 new incident, 0 with updates.

Started

  • ClosedPatched

    Microsoft Streaming Service Untrusted Pointer Dereference

    Microsoft Streaming Service contains an untrusted pointer dereference vulnerability that allows for privilege escalation, enabling a local attacker to gain SYSTEM privileges. Added to the CISA KEV catalog on 2024-02-29. CVE-2023-29360 was assigned before 2024; the KEV listing came in 2024.

    Microsoft Streaming ServiceClosed Feb 29, 2024