{"id":"CVE-2026-106177","aliases":["EUVD-2026-95084","GHSA-96gh-wj4m-5438"],"status":"published","title":"HP Sure Click Kernel Buffer Overflow","description":"A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.","severity":{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00102,"percentile":0.00917,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-122"],"published":"2026-10-08T15:32:16Z","modified":"2026-10-09T04:18:04Z","products":[{"vendor":"hp inc","product":"hp sure click enterprise"},{"vendor":"hp inc","product":"hp wolf pro security"},{"vendor":"hp inc","product":"hp wolf pro security edition"},{"vendor":"hp inc","product":"hp wolf security for business"}],"references":[{"url":"https://support.hp.com/us-en/document/ish_15759419-15759442-16/hpsbhf04157"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106177"},{"url":"https://github.com/advisories/GHSA-96gh-wj4m-5438"}],"sources":{"cve":[{"id":"CVE-2026-106177","title":"HP Sure Click Kernel Buffer Overflow","description":"A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.","status":"published","published":"2026-10-08T15:32:16.01Z","modified":"2026-10-09T03:55:52.322Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:20:04.156238Z"}],"euvd":[{"id":"EUVD-2026-95084","description":"A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.","status":"published","published":"2026-10-08T15:32:16Z","modified":"2026-10-09T03:55:52Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T17:27:25.459601Z"}],"ghsa":[{"id":"GHSA-96gh-wj4m-5438","title":"A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local...","description":"A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.","status":"published","published":"2026-10-08T18:32:28Z","modified":"2026-10-08T18:32:31Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T15:12:57.86261Z"}],"nvd":[{"id":"CVE-2026-106177","description":"A kernel buffer overflow vulnerability in HP Sure Click versions prior to 4.4.33 may allow local privilege escalation or arbitrary code execution. HP has released version 4.4.33 to address this vulnerability.","status":"published","published":"2026-10-08T16:17:01.777Z","modified":"2026-10-09T04:18:04.79Z","cvss":[{"version":"3.1","score":6.4,"vector":"CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-122"],"updated_at":"2026-11-02T14:12:55.142936Z"}]}}