CVE-2026-106177: HP Sure Click Kernel Buffer Overflow
Published Oct 8, 2026
·Updated
A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.
Affected Software
1 affected component
HP Sure Click<4.4.33
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HP Sure Clickto a version that resolves this vulnerability.Fixed in 4.4.33
Event History
Oct 8, 2026
CVE Published
via MITRE·03:32 PM
Data Sourced
via MITRE·03:32 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs local access and high privileges. User interaction is not required.
2
What is the potential impact if the vulnerability is exploited?
Successful exploitation could affect confidentiality, integrity, and availability, each rated High in the provided CVSS vector.
3
Is this vulnerability exposed remotely by default?
The provided CVSS vector lists attack vector as Local, so it is not described as remotely exploitable.