CVE-2026-105732

Awaiting Analysis Awaiting Analysis - Queue

Stack-based Buffer Overflow in SysInternals

Publication date: 2026-10-13

Last updated on: 2026-10-13

Assigner: Microsoft Corporation

Description

Stack-based buffer overflow in SysInternals allows an authorized attacker to elevate privileges locally.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-13

Last Modified

2026-10-13

Generated

2026-10-14

AI Q&A

2026-10-14

EPSS Evaluated

N/A

NVD

CVE-2026-105732

EUVD

EUVD-2026-99079

Affected Vendors & Products

Vendor	Product	Version / Range
Microsoft	Sysinternals	Suite 3.0.0

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This is a stack-based buffer overflow in SysInternals that allows an authorized local attacker to elevate privileges. It occurs when a program writes more data to a buffer than it can hold, overwriting adjacent memory and potentially allowing arbitrary code execution.

Impact Analysis

An attacker with local access could exploit this to gain higher privileges on your system, potentially allowing them to install malware, steal data, or take control of your device. It requires local access but no user interaction beyond initial authorization.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR's data protection requirements and HIPAA's security rules for protected health information. Organizations may face compliance penalties if exploited.

Mitigation Strategies

Update SysInternals Suite to the latest version to patch the stack-based buffer overflow vulnerability. Apply least privilege principles to limit local user access. Monitor system logs for unusual privilege escalation attempts.

Hi! I’m here to help you understand CVE-2026-105732. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70