System Informer
Approved changes feed: RSS · Atom
cpe:2.3:a:winsiderss:system_informer:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Winsiderss (ec7d9d46-93e6-502f-ad6b-d091a677857a) |
|---|---|
| Product | System Informer (2e0b5eb6-2c64-56fe-92c8-0eca0ee5b82e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-107782 |
vulnerable | 2026-11-03 10:15:59.084263 |
System Informer before 4.0.26241.138 Incorrect Authorization in phsvc ALPC Port
HIGH (7.8)
System Informer before 4.0.26241.138 contains an incorrect authorization vulnerability in the phsvc helper that allows local attackers to reach privileged APIs by connecting from any Authenticode-signed process. Attackers can load code into a Microsoft-signed host like rundll32.exe, connect to SiSvcApiPort, and call PhSvcApiCreateService to execute code as SYSTEM.
Published: 2026-10-08T20:15:56.603Z
Updated: 2026-10-14T01:19:53.192Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.