CVE-2026-105729: SysInternals Elevation of Privilege Vulnerability
Published Oct 13, 2026
·Updated
SysInternals Elevation of Privilege Vulnerability
Other sources
Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Sysinternals
Microsoft Windows Sysinternals Process Monitor<v4.04
v4.04
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in v4.04
Event History
Oct 13, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
CVE Published
via MITRE·07:01 PM
Data Sourced
via MITRE·07:01 PM
DescriptionSeverity
Frequently Asked Questions
1
Does exploitation require user interaction or complex attack conditions?
The CVSS vector indicates low attack complexity and no user interaction. The attacker must already have low-level local privileges.
2
What is the expected impact after successful exploitation?
The vulnerability is rated high severity (7.1). It can result in high integrity and availability impact, while the CVSS vector indicates no confidentiality impact and unchanged scope.