CVE-2026-100205

HighCVSS 7.1

Published: 13/10/2026(UTC)Updated: 13/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.35%

26th percentile - higher than 26% of all known CVEs

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.

An authenticated attacker with local access can exploit this vulnerability to escalate privileges and gain administrative control over the system.

Update SysInternals tools to the latest version and restrict local access to trusted users.

Original NVD description (English source)

Untrusted pointer dereference in SysInternals allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS