Search
Find a vulnerability
Search criteria
2 vulnerabilities by winsiderss
CVE-2026-107782 (GCVE-0-2026-107782)
Vulnerability from nvd – Published: 2026-10-08 20:15 – Updated: 2026-10-08 20:15
VLAI
EPSS
VEX
Title
System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port
Summary
System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to SiSvcApiPort, and call PhSvcApiCreateService to execute code as SYSTEM.
Severity
CWE
- CWE-863 - Incorrect Authorization
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/winsiderss/systeminformer/comm… | patch |
| https://github.com/winsiderss/systeminformer/blob… | technical-description |
| https://github.com/winsiderss/systeminformer/rele… | release-notes |
| https://github.com/winsiderss/systeminformer | product |
| https://www.vulncheck.com/advisories/system-infor… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| winsiderss | System Informer |
Affected:
0 , < 4.0.26241.138
(custom)
Unaffected: 4.0.26241.138 (custom) |
Date Public
2026-08-28 00:00
{
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://github.com/winsiderss/systeminformer",
"defaultStatus": "unaffected",
"packageURL": "pkg:github/winsiderss/systeminformer",
"product": "System Informer",
"repo": "https://github.com/winsiderss/systeminformer",
"vendor": "winsiderss",
"versions": [
{
"lessThan": "4.0.26241.138",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "4.0.26241.138",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Muhammad Ali"
}
],
"datePublic": "2026-08-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to SiSvcApiPort, and call PhSvcApiCreateService to execute code as SYSTEM."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T20:15:56.603Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Patch Commit",
"tags": [
"patch"
],
"url": "https://github.com/winsiderss/systeminformer/commit/ce451a264a424f6f386b1615df651f8364aaeb9f"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/winsiderss/systeminformer/blob/v3.2.25011.2103/SystemInformer/phsvc/svcapiport.c#L196-L230"
},
{
"name": "System Informer v4.0.26241.138 Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/winsiderss/systeminformer/releases/tag/v4.0.26241.138"
},
{
"tags": [
"product"
],
"url": "https://github.com/winsiderss/systeminformer"
},
{
"name": "VulnCheck Advisory: System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/system-informer-before-4.0.26241.138-incorrect-authorization-in-phsvc-alpc-port"
}
],
"title": "System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-107782",
"datePublished": "2026-10-08T20:15:56.603Z",
"dateReserved": "2026-10-08T20:02:31.398Z",
"dateUpdated": "2026-10-08T20:15:56.603Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-107782 (GCVE-0-2026-107782)
Vulnerability from cvelistv5 – Published: 2026-10-08 20:15 – Updated: 2026-10-08 20:15
VLAI
EPSS
VEX
Title
System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port
Summary
System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to SiSvcApiPort, and call PhSvcApiCreateService to execute code as SYSTEM.
Severity
CWE
- CWE-863 - Incorrect Authorization
Assigner
References
5 references
| URL | Tags |
|---|---|
| https://github.com/winsiderss/systeminformer/comm… | patch |
| https://github.com/winsiderss/systeminformer/blob… | technical-description |
| https://github.com/winsiderss/systeminformer/rele… | release-notes |
| https://github.com/winsiderss/systeminformer | product |
| https://www.vulncheck.com/advisories/system-infor… | third-party-advisory |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| winsiderss | System Informer |
Affected:
0 , < 4.0.26241.138
(custom)
Unaffected: 4.0.26241.138 (custom) |
Date Public
2026-08-28 00:00
{
"containers": {
"cna": {
"affected": [
{
"collectionURL": "https://github.com/winsiderss/systeminformer",
"defaultStatus": "unaffected",
"packageURL": "pkg:github/winsiderss/systeminformer",
"product": "System Informer",
"repo": "https://github.com/winsiderss/systeminformer",
"vendor": "winsiderss",
"versions": [
{
"lessThan": "4.0.26241.138",
"status": "affected",
"version": "0",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "4.0.26241.138",
"versionType": "custom"
}
]
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Muhammad Ali"
}
],
"datePublic": "2026-08-28T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to SiSvcApiPort, and call PhSvcApiCreateService to execute code as SYSTEM."
}
],
"metrics": [
{
"cvssV4_0": {
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "LOCAL",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"privilegesRequired": "LOW",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "HIGH",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "HIGH"
},
"format": "CVSS"
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-863",
"description": "Incorrect Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-08T20:15:56.603Z",
"orgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"shortName": "VulnCheck"
},
"references": [
{
"name": "Patch Commit",
"tags": [
"patch"
],
"url": "https://github.com/winsiderss/systeminformer/commit/ce451a264a424f6f386b1615df651f8364aaeb9f"
},
{
"tags": [
"technical-description"
],
"url": "https://github.com/winsiderss/systeminformer/blob/v3.2.25011.2103/SystemInformer/phsvc/svcapiport.c#L196-L230"
},
{
"name": "System Informer v4.0.26241.138 Release Notes",
"tags": [
"release-notes"
],
"url": "https://github.com/winsiderss/systeminformer/releases/tag/v4.0.26241.138"
},
{
"tags": [
"product"
],
"url": "https://github.com/winsiderss/systeminformer"
},
{
"name": "VulnCheck Advisory: System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port",
"tags": [
"third-party-advisory"
],
"url": "https://www.vulncheck.com/advisories/system-informer-before-4.0.26241.138-incorrect-authorization-in-phsvc-alpc-port"
}
],
"title": "System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port",
"x_generator": {
"engine": "vulncheck-endgame"
}
}
},
"cveMetadata": {
"assignerOrgId": "83251b91-4cc7-4094-a5c7-464a1b83ea10",
"assignerShortName": "VulnCheck",
"cveId": "CVE-2026-107782",
"datePublished": "2026-10-08T20:15:56.603Z",
"dateReserved": "2026-10-08T20:02:31.398Z",
"dateUpdated": "2026-10-08T20:15:56.603Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}