CVE-2026-106177: HP Sure Click Kernel Buffer Overflow
A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.
Other sources
HP has released a fix to mitigate the potential vulnerability in software that includes HP Sure Click.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
HP Sure Clickto a version that resolves this vulnerability.Fixed in 4.4.33
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that an attacker needs local access and high privileges. User interaction is not required.
What is the potential impact if the vulnerability is exploited?
Successful exploitation could affect confidentiality, integrity, and availability, each rated High in the provided CVSS vector.
Is this vulnerability exposed remotely by default?
The provided CVSS vector lists attack vector as Local, so it is not described as remotely exploitable.