https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-10T01:10:00.841062+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-107782 fkie_cve-2026-107782 2026-10-10T01:10:00.870234+00:00

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to SiSvcApiPort, and call PhSvcApiCreateService to execute code as SYSTEM.

 https://db.gcve.eu/vuln/ghsa-mx65-q648-g54f GHSA-mx65-q648-g54f 2026-10-10T01:10:00.870502+00:00

System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to SiSvcApiPort, and call PhSvcApiCreateService to execute code as SYSTEM.