Vulnerability Bulletins |
CVE-2026-107782 |
|
| Affected software | MICROSOFT |
| System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to SiSvcApiPort, and call PhSvcApiCreateService to execute code as SYSTEM. | |
Link: |
|
| https://nvd.nist.gov/vuln/detail/CVE-2026-107782 | |