CVE-2026-105732: SysInternals Elevation of Privilege Vulnerability
Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.
Other sources
SysInternals Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 1.03
Event History
Frequently Asked Questions
Who is exposed to this vulnerability?
Systems running Microsoft Sysinternals or Microsoft Sysinternals Suite are potentially affected. Exploitation is local, so the attacker must already be able to execute code or otherwise act on the target system as an authorized user.
What level of access and interaction does exploitation require?
The attacker needs low-privileged access on the affected machine and user interaction is required. The vulnerability does not describe a remote attack path.
What could an attacker gain if exploitation succeeds?
A successful exploit can elevate the authorized local attacker's privileges. The reported impact includes high confidentiality, integrity, and availability effects.